Inherited Security Permissions in Exchange System Manager
Dear Experts,
Most importantly, I will increase the points for this Question to 125 as soon as I get my points refunded elsewhere :-)
In Exchange System Manager when I right click on the item "Default Global Address List" (see the tree structure below) and choose Properties and then click on the Security Tab I can edit the settings, but only if I choose to remove/copy inherited permissions first, because this item is inheriting permissions from somewhere...
Organisation Name
- Recipients
- Global Address List
- Default Global Address List
The same goes for the Mailbox Store, and a lot of other entries.
I understand NTFS permissions inheritability, but evidently the System Manager is presenting me with a human-friendly view of the tree structure and not the real security inheritance structure, if you see what I mean.
The reason I ask is that there are some weird names in the list of security settings, evidently a user account has become damaged and the Server can't pull up the DisplayName any more. I want to get rid of this mess but I don't want to turn off inheritance because it is clearly there for a reason.
I need to get to the top of the tree and remove the entries there but I don't know where to right click and choose Properties. Do I need to look elsewhere? A different MMC console?
Joe
Most importantly, I will increase the points for this Question to 125 as soon as I get my points refunded elsewhere :-)
In Exchange System Manager when I right click on the item "Default Global Address List" (see the tree structure below) and choose Properties and then click on the Security Tab I can edit the settings, but only if I choose to remove/copy inherited permissions first, because this item is inheriting permissions from somewhere...
Organisation Name
- Recipients
- Global Address List
- Default Global Address List
The same goes for the Mailbox Store, and a lot of other entries.
I understand NTFS permissions inheritability, but evidently the System Manager is presenting me with a human-friendly view of the tree structure and not the real security inheritance structure, if you see what I mean.
The reason I ask is that there are some weird names in the list of security settings, evidently a user account has become damaged and the Server can't pull up the DisplayName any more. I want to get rid of this mess but I don't want to turn off inheritance because it is clearly there for a reason.
I need to get to the top of the tree and remove the entries there but I don't know where to right click and choose Properties. Do I need to look elsewhere? A different MMC console?
Joe
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I will check out the suggestion and get back to you..
Sorry!
Joe