Inherited Security Permissions in Exchange System Manager
Posted on 2006-07-10
Most importantly, I will increase the points for this Question to 125 as soon as I get my points refunded elsewhere :-)
In Exchange System Manager when I right click on the item "Default Global Address List" (see the tree structure below) and choose Properties and then click on the Security Tab I can edit the settings, but only if I choose to remove/copy inherited permissions first, because this item is inheriting permissions from somewhere...
- Global Address List
- Default Global Address List
The same goes for the Mailbox Store, and a lot of other entries.
I understand NTFS permissions inheritability, but evidently the System Manager is presenting me with a human-friendly view of the tree structure and not the real security inheritance structure, if you see what I mean.
The reason I ask is that there are some weird names in the list of security settings, evidently a user account has become damaged and the Server can't pull up the DisplayName any more. I want to get rid of this mess but I don't want to turn off inheritance because it is clearly there for a reason.
I need to get to the top of the tree and remove the entries there but I don't know where to right click and choose Properties. Do I need to look elsewhere? A different MMC console?