?
Solved

Need to remove Everyone access from individual mailboxes

Posted on 2004-08-09
4
Medium Priority
?
598 Views
Last Modified: 2010-08-05
Hi

I have taken over the administration of an Exchange server. Each mailbox can be open by everyone else. I need all mailboxes to be secure and only accessible by that user.

If I go to "Active Directory Users and Computers" and select a user then click the properties of the mailbox > Exchange Advance > mailbox rights then I see the Everyone group as having read access. I cannot remove this group as I get the following error:

"You cannot remove "everyone" because the object is inheriting permissions from its parent.  Turn off the options for inheriting permissions and try again."

Where do I go to turn off "inheriting permissions?".

Incidentally I have checked the Exchange Domain Servers group and the only members are XXXServ01 (the server name) which is in the Active Directory folder of XXXXXX.co.uk/domain controllers.

0
Comment
Question by:Danbrasco
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 12

Accepted Solution

by:
BNettles73 earned 250 total points
ID: 11754945
Working with Store Permissions in Microsoft Exchange 2000 and 2003
This document explains the process by which Exchange 2000 Server and Exchange Server 2003 uses permissions to control access to objects in the Exchange store (public folder databases and mailbox databases).

http://www.microsoft.com/downloads/details.aspx?FamilyId=2AE266F0-16B7-40D7-94D9-C8BE0E968A57&displaylang=en


On your workstation -
Add the ShowSecurityPage Entry to the Registry

Start Registry Editor: On the Start menu, click Run, type regedit, and then click OK.
Locate the following key in the registry:
KEY_CURRENT_USER\Software\Microsoft\Exchange\ExAdmin

To add the ShowSecurityPage DWORD value, click Edit, click New, and then click DWORD Value.
For the new value name, type: ShowSecurityPage
Double-click ShowSecurityPage, and then type 1 in Value data. Go to the next procedure.
back to the top

To modify permissions in the root of your Org -
Start System Manager: On the Start menu, point to Programs, point to Microsoft Exchange, and then click System Manager.
Right-click the organization, and then click Properties.
Click the Security tab.
Modify relevant permissions ...

Make sure you understand the implications of modifying security settings ....
0
 

Author Comment

by:Danbrasco
ID: 11760619
Is there no way to remove the everyone group from the individual mailboxes?
0
 

Author Comment

by:Danbrasco
ID: 11813904
I eventually found that the problem was due to the Authenticated users having full control
0
 
LVL 12

Expert Comment

by:BNettles73
ID: 11813921
That's in the doc I sent you the link for isn't it?

Either way ... Congrats ... glad you got it fixed at least!!!
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses
Course of the Month8 days, 23 hours left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question