Solved

Inherited Security Permissions in Exchange System Manager

Posted on 2006-07-10
4
1,405 Views
Last Modified: 2013-12-03
Dear Experts,

Most importantly, I will increase the points for this Question to 125 as soon as I get my points refunded elsewhere :-)

In Exchange System Manager when I right click on the item "Default Global Address List" (see the tree structure below) and choose Properties and then click on the Security Tab I can edit the settings, but only if I choose to remove/copy inherited permissions first, because this item is inheriting permissions from somewhere...

Organisation Name
- Recipients
   - Global Address List
      - Default Global Address List

The same goes for the Mailbox Store, and a lot of other entries.

I understand NTFS permissions inheritability, but evidently the System Manager is presenting me with a human-friendly view of the tree structure and not the real security inheritance structure, if you see what I mean.

The reason I ask is that there are some weird names in the list of security settings, evidently a user account has become damaged and the Server can't pull up the DisplayName any more. I want to get rid of this mess but I don't want to turn off inheritance because it is clearly there for a reason.

I need to get to the top of the tree and remove the entries there but I don't know where to right click and choose Properties. Do I need to look elsewhere? A different MMC console?

Joe
0
Comment
Question by:joesinc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 126 total points
ID: 17204910
There is a further permission level that is hidden.

In ESM, right click on the Exchange org and choose Properties. You should see a security tab. If you don't, then you need to enable it.

In the registry, go to Hkey_Current_User, Software,  Microsoft, Exchange, ExAdmin.

Create a new Dword Value of "ShowSecurityPage" and give it a value of 1.

Restart ESM.

You should now be able to see the security tab.

Simon.
0
 
LVL 3

Author Comment

by:joesinc
ID: 17370459
Oops, my bad.. the priority on their issue fell to the back of the queue and I forgot about it!

I will check out the suggestion and get back to you..

Sorry!

Joe
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question