Exchange mailbox pemissions - Explanation needed.

Hi,
I've recenlty installed a GFI Mail Archiver tool and the current archiving is working well.
However, I'm trying to now archive emails that are in Exchange prior to enabling the journaling mailbox.

GFI documentation details a change I must make to give administrator permission to "receive as" and "send as" all mailboxes
http://kbase.gfi.com/showarticle.asp?id=KBID003038

All worked fine in virtual server however on the live server, where there have already been complaints of performance issues. I got two dialog warnings which have scarred me to proceed.

I have put the 2nd warning first below as this is the one that scares me most. I do not really understand it and would welcome comments as to whether I should be worried and where I can learn more about this.

Thanks

dialogue-warning2.JPG
dialogue-warning1.JPG
afflik1923Asked:
Who is Participating?
 
kieran_bCommented:
It will only slow things down noticeably if you have thousands and thousands of objects (users)

For giving administrators mailbox access, this guide is the winner -> http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
0
 
kieran_bCommented:
Yeah, I would be hesitant to click yes on the second one - say no, cancel out, then make this modification to the GFI steps;

7. (still in the advanced tab) select all "deny" entries at the top, and click remove - there will be about 5 of them

Then skip steps 8 and 9

What we are now doing is instead of messing with the permissions too much, we are just removing the deny restrictions on the admins - this will do only that, remove the block allowing admins to all mailboxes.  Anything that involves saying "Yes, I am happy to apply deny entries" like the GFI instructions, could do anything...

If you really want to reverse the process after you are done, you can then go back and add the deny rights again (reverse of what we did here)
0
 
afflik1923Author Commented:
Thanks for that.

I've think I'm made things a bit confusing with the way I've ordered the screen shots. It seems you are most worried about the "dialogue-warning-1.jpg".
This one I was not too worried about as it occured in testing, but maybe I should be worried about it.

I had a response from GFI tech support on the subject and they seem to say I have to follow their procedure and that if I follow the second step it will reverse the changes anyway

Would you agree with that? Also do you know of any sources that will help me understand why changing permissions could slow things down (As shown in "dialogue-warning-2.jpg".)
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
afflik1923Author Commented:
Great stuff. I'll cehck it out. There are about 70 users in this company so I assume I have nothing to worry about then, right?
0
 
kieran_bCommented:
70 is not a problem
0
 
afflik1923Author Commented:
I implemented the changes as explained in th GFI manual and it seemed to have no ill effect on performance or anything else as far as I know. So thanks for the input.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.