• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1677
  • Last Modified:

Remove "other user's folder" permissions.

Have a user who granted "editor" permissions to her inbox to another user.  (Through Inbox/properties/permissions)
She now wants to deny access to that user.   She went in to Inbox/properties/permissions again and removed the user.  Her "default" permissions are set to "None"  
I have stopped and started all the exchange services.
Yet the other user can still go in through "Open/other user's folder"  and open her inbox.  
How do we stop this?

Will also post this in the Exchange TA
0
JConchie
Asked:
JConchie
3 Solutions
 
InteraXCommented:
Hi JConchie,

You may need to edit the rights on the inbox and the root folder of the mailbox. If you do not have rights to the root folder (the on titled 'Mailbox - Username') then you shouldn't be able to see any folders beneath it. If you can still see the folders on the other users account, the rights may be set via Exchange System Manager on the mailbox itself.

Good Luck
;-)
0
 
sunray_2003Commented:
Hi JConchie,

If i am not wrong , you may also want to check in the users outlook going to tools > options > delegates and see if that other user is listed and if yes ,remove that user.
Not quite familiar with exchange but the above might help..

have you restarted both user's outlook and checked ?
0
 
MicrotechCommented:
you will need to log out of exchange and back in again
0
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

 
MicrotechCommented:
i meant outlook ... and sr got there 1st... you can log into Active directory and set the mailbox rights to deny the user to do anything.
0
 
JConchieAuthor Commented:
Sun:
Have restarted both..and the exchange services....she did have the other user as a delegate, but I removed that
too....other user still able to access

InteraX:
No permissions set on the root folder....default is "none"

So how do i check what rights are set on the exchange server....and how do I change them if they are there?
0
 
MicrotechCommented:
start progs> exchange > aduc> then view > advanced features> go to your user > exchange advanced tab > mailbox permissions.

then get them to log out of the domain and back in to get a new access token.
0
 
JConchieAuthor Commented:
Microtech,
This gets messier and messier........I went into the mailbox permissions in ad on the exchange server (2000) and found that it was inheriting a "Read" permission for "Everyone" from somewhere.  Set an explicit "Deny" on that , which should have done the trick....but did not....other user still has access....as does everyone else, as it turns out.
That inherited "everyone/read" permission is on all of our mailboxes....and from within Outlook, anybody can open anybody else's inbox.  As I say....a real mess......I don't know where that permission is being inherited from......
0
 
JConchieAuthor Commented:
Just pulled out my Exchange 2000 book...and it turns out that that Everyone/read permission...just "allows you to read the mailbox rights".......... so it does not allow "read" on the mailbox itself and is not the problem.  In fact, the book suggests that you can only give permissions in Outlook......but right now, everybody can open anyonelse's inbox through "Open/other users folder"

Need to figure out how to change that.
0
 
JConchieAuthor Commented:


Turns out our company owner had gone in and added a bunch of people to the domain admins group, "just in case they needed to get in while you are away"  Gently explained the associated problems and issues....and took away his domain admin rights too....

Points split to those who had me going in the right direction.

20 x "A"  pts to first person to post into:

http://www.experts-exchange.com/Networking/Email_Groupware/Exchange_Server/Q_21219107.html

so that I can close it.

thanks for the efforts, all
0

Featured Post

Take Control of Web Hosting For Your Clients

As a web developer or IT admin, successfully managing multiple client accounts can be challenging. In this webinar we will look at the tools provided by Media Temple and Plesk to make managing your clients’ hosting easier.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now