Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Secure who can and cannot create mailboxes

Posted on 2006-06-27
3
Medium Priority
?
205 Views
Last Modified: 2010-08-05
Hi,
   It seems like a desktop supp. tech created a user account along with a mailbox for a new user that was not supposed to have a mailbox.
The only way i can think of how he could have created the mailbox was if he had Exchnge Sys Mngr tools installed on his PC. If he did, how can I prohibit him from doing it again? He does not have any access to the exchange server at all. How else can a mailbox be created?
Thanks.
0
Comment
Question by:sudipmis
3 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 16995556
The only way is for the Exchange tools to be installed. Otherwise the extensions aren't there. You can soon tell by accessing ADUC on the machine. Could also have lifted all the dlls and registered them manually.

You need to look at the delegation settings in both the domain and Exchange. You should be able to restrict the tech down using those.

Simon.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here in this article, you will get a step by step guidance on how to restore an Exchange database to a recovery database. Get a brief on Recovery Database and how it can be used to restore Exchange database in this section!
As much as Microsoft wants to kill off PST file support, just as they tried to do with public folders, there are still times when it is useful or downright necessary to export Exchange mailboxes to PST files. Thankfully, it is still possible to e…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
Suggested Courses

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question