Overview 

You may wish to setup Kerio Connect functionality in such a way that access is restricted to some services for specific users. For instance, you may wish to allow only CalDAV and CardDAV protocols for Calendar and Contacts Syncing respectively. Alternatively, you may wish to restrict access to any service for any users from a certain IP Address Group. 

Solution

You can accomplish this in two steps; first by creating a User Access policy that defines the restrictions, and then by assigning this policy to the users to which access needs to be restricted. 

Defining the User Access Policy: 

1. In the administration interface, go to Configuration (Gear Icon). Under the Definitions section, click User Access Policies.
2. Click Add Policy.
   
     
3. Enter a name for the policy, in this example we will call it Only WebDav, CalDav, CardDav.
4. Click the Add restriction link.        
   
   
5. Select a Protocol from the drop-down menu.
6. Select the level of access (Allow/Deny/Allow only to). In this example, we will allow WebDAV, CalDAV, and CardDAV protocol only for the local client's IP address group. All other protocols should be denied. You can add multiple restrictions.
   
7. Set access for the remaining (unselected) protocols.
8. Click Apply.
9. To remove a restriction, select it and click Remove.
10. To remove a policy, select it and click Remove.
11. (Optional) If you want to disable mail server communication server-wide and leave only one specific service, i.e. HTTPS, stop the necessary services accordingly. For more information, please refer to Kerio Connect Services.
    

Assigning Policies to Users

1. In the administration interface, go to Accounts > Users.
2. Double-click a user and go to the Rights tab.
3. Select the Access policy from the drop-down list that you created in the previous section. In this example, it was Only WebDav, CalDav, CardDav.
   
4. Click OK.

Confirmation and Testing

Test if the policy works by logging in as a user and attempt to access the service. 

If any problem regarding services occurs, consult the Debug log by selecting the appropriate message type option (service to be logged):

Too many log messages may slow down your server. Once you solve your problem, disable the logging.