• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4068
  • Last Modified:

Administer Information Store permissions

Could someone please tell me the implication in providing someone with Administer Information Store, Receive As, and Send As permissions on the mailbox store.

For instance will they have access to the mailboxes for that mailbox store?
0
mbavisi
Asked:
mbavisi
  • 4
  • 3
1 Solution
 
msghalebCommented:
Hello,

send as recive as permision is everything, he can even read the mails from the users, usually this was used only in old backup solutions to give the backup software the permissions to backup individual mailboxes.

What would you like to this user to do? may be you don't need to give him such permissions.

MG
0
 
mbavisiAuthor Commented:
We have created an account for a Cisco Call Manager which will use the exchange server to send texts.  In order to do this they require the permissions stated above.  However our concern is that this leaves a vulnerability where by the Cisco Call Manager has control of user mailboxes
0
 
msghalebCommented:
you are right, this permission is not recomended to be given to a human :) what I mean is if they need a service to run with this permissions, may be you can do it but don't give the password out.

I wont do it honestly.

MG
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
msghalebCommented:
for example, if Cisco call manager need this permissions (I think it won't work without it for a logical reasons) to be given to a Windows service that then will do the Job, ok no problem so you can configure the service to use this account and you type the password ur self.

The main issues if someone knows this password he may try to login into Exchange using OWA for eaxmple, but if it's an internal service and a cisco product and you only know the password then no problem.

MG
0
 
mbavisiAuthor Commented:
Thanks.  Just out of curiosity how would I have access to all the users mailboxes?  Would this work by firstly logging on with the user credentials and then delegating myself control to a particular mailbox from the Outlook client?
0
 
msghalebCommented:
To gain access to a specific user mailbox, go to your Exchange mailbox and then open Active Directory user and computers, right click on this user -> properties and then Exchange Advanced -> Mailbox rights and give ur self everything.

(the last option u don't need if u have everything alow above)

Then open your outlook normally and then:

- click on file -> open -> other users folder.

Thank you.
0
 
mbavisiAuthor Commented:
Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now