Solved

Inherited Security Permissions in Exchange System Manager

Posted on 2006-07-10
4
1,402 Views
Last Modified: 2013-12-03
Dear Experts,

Most importantly, I will increase the points for this Question to 125 as soon as I get my points refunded elsewhere :-)

In Exchange System Manager when I right click on the item "Default Global Address List" (see the tree structure below) and choose Properties and then click on the Security Tab I can edit the settings, but only if I choose to remove/copy inherited permissions first, because this item is inheriting permissions from somewhere...

Organisation Name
- Recipients
   - Global Address List
      - Default Global Address List

The same goes for the Mailbox Store, and a lot of other entries.

I understand NTFS permissions inheritability, but evidently the System Manager is presenting me with a human-friendly view of the tree structure and not the real security inheritance structure, if you see what I mean.

The reason I ask is that there are some weird names in the list of security settings, evidently a user account has become damaged and the Server can't pull up the DisplayName any more. I want to get rid of this mess but I don't want to turn off inheritance because it is clearly there for a reason.

I need to get to the top of the tree and remove the entries there but I don't know where to right click and choose Properties. Do I need to look elsewhere? A different MMC console?

Joe
0
Comment
Question by:joesinc
4 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 126 total points
ID: 17204910
There is a further permission level that is hidden.

In ESM, right click on the Exchange org and choose Properties. You should see a security tab. If you don't, then you need to enable it.

In the registry, go to Hkey_Current_User, Software,  Microsoft, Exchange, ExAdmin.

Create a new Dword Value of "ShowSecurityPage" and give it a value of 1.

Restart ESM.

You should now be able to see the security tab.

Simon.
0
 
LVL 3

Author Comment

by:joesinc
ID: 17370459
Oops, my bad.. the priority on their issue fell to the back of the queue and I forgot about it!

I will check out the suggestion and get back to you..

Sorry!

Joe
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now