• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1412
  • Last Modified:

Inherited Security Permissions in Exchange System Manager

Dear Experts,

Most importantly, I will increase the points for this Question to 125 as soon as I get my points refunded elsewhere :-)

In Exchange System Manager when I right click on the item "Default Global Address List" (see the tree structure below) and choose Properties and then click on the Security Tab I can edit the settings, but only if I choose to remove/copy inherited permissions first, because this item is inheriting permissions from somewhere...

Organisation Name
- Recipients
   - Global Address List
      - Default Global Address List

The same goes for the Mailbox Store, and a lot of other entries.

I understand NTFS permissions inheritability, but evidently the System Manager is presenting me with a human-friendly view of the tree structure and not the real security inheritance structure, if you see what I mean.

The reason I ask is that there are some weird names in the list of security settings, evidently a user account has become damaged and the Server can't pull up the DisplayName any more. I want to get rid of this mess but I don't want to turn off inheritance because it is clearly there for a reason.

I need to get to the top of the tree and remove the entries there but I don't know where to right click and choose Properties. Do I need to look elsewhere? A different MMC console?

Joe
0
joesinc
Asked:
joesinc
1 Solution
 
SembeeCommented:
There is a further permission level that is hidden.

In ESM, right click on the Exchange org and choose Properties. You should see a security tab. If you don't, then you need to enable it.

In the registry, go to Hkey_Current_User, Software,  Microsoft, Exchange, ExAdmin.

Create a new Dword Value of "ShowSecurityPage" and give it a value of 1.

Restart ESM.

You should now be able to see the security tab.

Simon.
0
 
joesincAuthor Commented:
Oops, my bad.. the priority on their issue fell to the back of the queue and I forgot about it!

I will check out the suggestion and get back to you..

Sorry!

Joe
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now