kwoznica
asked on
Mailbox Permission Inheritance
Hello all,
I have an exchange 2003 server with the latest service packs and updates on a windows 2003 server with service pack 1. My environment is an 2003 AD environment. The Exchange server is also a DC.
My issue is related to security permissions to mailbox's. I have a user who is listed as having permissions to all users mailbox's and seems to be inheriting these permissions. I cannot seem to find the source of the inheritance and need to discover 2 things. 1) How do I find the source of this users inheritance. 2.)How do I remove this users inheritance all the way down to the mailbox level?
Any suggestions are welcomed.
I have an exchange 2003 server with the latest service packs and updates on a windows 2003 server with service pack 1. My environment is an 2003 AD environment. The Exchange server is also a DC.
My issue is related to security permissions to mailbox's. I have a user who is listed as having permissions to all users mailbox's and seems to be inheriting these permissions. I cannot seem to find the source of the inheritance and need to discover 2 things. 1) How do I find the source of this users inheritance. 2.)How do I remove this users inheritance all the way down to the mailbox level?
Any suggestions are welcomed.
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
it could have the sevice account permission assigned
more info on that here http://support.microsoft.com/kb/262054
wrong link this is how it could have been done http://support.microsoft.com/kb/821897
ASKER
Thanks for the replies.
How do I verify the user is added as a service account?
Currently the user is a member of domain users, a group called Exec, Several distribution lists and remote desktop users.
When I look in the system manager and view the security tab for the entire exchange organization, I find this user is inheriting permissions at this level. Where can this inheritance be coming from?
Thanks,
Keith
How do I verify the user is added as a service account?
Currently the user is a member of domain users, a group called Exec, Several distribution lists and remote desktop users.
When I look in the system manager and view the security tab for the entire exchange organization, I find this user is inheriting permissions at this level. Where can this inheritance be coming from?
Thanks,
Keith
ASKER
I used ADSIedit.msc and found in CN=Microsoft Exchange, looked on the properties and checked the security tab and this appears to be a source of inheritance. I removed the user from the list and will wait for replication to occur to see if the user is removed from the mailbox permissions. I will update once that happens.
Keith
Keith
Exchange
Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.
213K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
