Solved

Inherited Security Permissions in Exchange System Manager

Posted on 2006-07-10
4
1,404 Views
Last Modified: 2013-12-03
Dear Experts,

Most importantly, I will increase the points for this Question to 125 as soon as I get my points refunded elsewhere :-)

In Exchange System Manager when I right click on the item "Default Global Address List" (see the tree structure below) and choose Properties and then click on the Security Tab I can edit the settings, but only if I choose to remove/copy inherited permissions first, because this item is inheriting permissions from somewhere...

Organisation Name
- Recipients
   - Global Address List
      - Default Global Address List

The same goes for the Mailbox Store, and a lot of other entries.

I understand NTFS permissions inheritability, but evidently the System Manager is presenting me with a human-friendly view of the tree structure and not the real security inheritance structure, if you see what I mean.

The reason I ask is that there are some weird names in the list of security settings, evidently a user account has become damaged and the Server can't pull up the DisplayName any more. I want to get rid of this mess but I don't want to turn off inheritance because it is clearly there for a reason.

I need to get to the top of the tree and remove the entries there but I don't know where to right click and choose Properties. Do I need to look elsewhere? A different MMC console?

Joe
0
Comment
Question by:joesinc
4 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 126 total points
ID: 17204910
There is a further permission level that is hidden.

In ESM, right click on the Exchange org and choose Properties. You should see a security tab. If you don't, then you need to enable it.

In the registry, go to Hkey_Current_User, Software,  Microsoft, Exchange, ExAdmin.

Create a new Dword Value of "ShowSecurityPage" and give it a value of 1.

Restart ESM.

You should now be able to see the security tab.

Simon.
0
 
LVL 3

Author Comment

by:joesinc
ID: 17370459
Oops, my bad.. the priority on their issue fell to the back of the queue and I forgot about it!

I will check out the suggestion and get back to you..

Sorry!

Joe
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question