Avatar of kwoznica
kwoznica

asked on 

Mailbox Permission Inheritance

Hello all,

I have an exchange 2003 server with the latest service packs and updates on a windows 2003 server with service pack 1. My environment is an 2003 AD environment. The Exchange server is also a DC.

My issue is related to security permissions to mailbox's. I have a user who is listed as having permissions to all users mailbox's and seems to be inheriting these permissions. I cannot seem to find the source of the inheritance and need to discover 2 things. 1) How do I find the source of this users inheritance. 2.)How do I remove this users inheritance all the way down to the mailbox level?

Any suggestions are welcomed.
Windows Server 2003Microsoft Forefront ISA ServerExchange

Avatar of undefined
Last Comment
kwoznica
ASKER CERTIFIED SOLUTION
Avatar of rakeshmiglani
rakeshmiglani
Flag of India image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of poweruser32
poweruser32

it could have the sevice account permission assigned
Avatar of poweruser32
poweruser32

more info on that here  http://support.microsoft.com/kb/262054
Avatar of poweruser32
poweruser32

wrong link this is how it could have been done http://support.microsoft.com/kb/821897
Avatar of kwoznica
kwoznica

ASKER

Thanks for the replies.

How do I verify the user is added as a service account?

Currently the user is a member of domain users, a group called Exec, Several distribution lists and remote desktop users.
When I look in the system manager and view the security tab for the entire exchange organization, I find this user is inheriting permissions at this level.  Where can this inheritance be coming from?

Thanks,
Keith
Avatar of kwoznica
kwoznica

ASKER

I used ADSIedit.msc and found in CN=Microsoft Exchange, looked on the properties and checked the security tab and this appears to be a source of inheritance. I removed the user from the list and will wait for replication to occur to see if the user is removed from the mailbox permissions. I will update once that happens.

Keith
Exchange
Exchange

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

213K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo