Restrict permissions to access or to give access to user mailbox in Exchange 2003

Posted on 2005-03-27
Medium Priority
Last Modified: 2012-08-13
My goal is to restrict IT administrators to give access to a user mailbox.
I have Ex 2003 on Windows 2003 servers and Window 2000 DC's. How can i restrict adminstrators who have domain admin rights giving access to other user mailboxes.

I know currently a domain admin can go to Exchange Advanced tab then to Mailbox Rights and give full control to any user he wants and also to him self. I need to have an exchange admin only the ability to give rights to other users mailboxes.
Question by:cdaya
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
LVL 26

Accepted Solution

Vahik earned 1500 total points
ID: 13645312
cdava i do not think what u want to accomplish is possible....domain admins carry a very
big gun and in an organization such as yours where there are more than one, a smart ars
one can be a  headache....most u can do is enable logging on ur exchange server and see who is logging in to whos mailbox(now this is not easy if u have OWA and delegation)
and due to the fact that domain admins can delete event viewr log files and even if they did not delete the log files it will be a daunting task for a large organization to check them
u want my opinion....have a friendly chat with them and explain what will happen if they get caught and that u are watching....they will understand...
i tell u what i did for an organization such as urs once...i came up with a trick...i asked managment to give out a memo that logging in to someone elses mailbox without approval(either from the other user or mangement) was a serious violation...and will be followed  with immediate termination.....IT WORKED....

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
Suggested Courses
Course of the Month7 days, 20 hours left to enroll

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question