Solved

Exchange mailbox pemissions - Explanation needed.

Posted on 2008-06-25
6
240 Views
Last Modified: 2011-10-19
Hi,
I've recenlty installed a GFI Mail Archiver tool and the current archiving is working well.
However, I'm trying to now archive emails that are in Exchange prior to enabling the journaling mailbox.

GFI documentation details a change I must make to give administrator permission to "receive as" and "send as" all mailboxes
http://kbase.gfi.com/showarticle.asp?id=KBID003038

All worked fine in virtual server however on the live server, where there have already been complaints of performance issues. I got two dialog warnings which have scarred me to proceed.

I have put the 2nd warning first below as this is the one that scares me most. I do not really understand it and would welcome comments as to whether I should be worried and where I can learn more about this.

Thanks

dialogue-warning2.JPG
dialogue-warning1.JPG
0
Comment
Question by:afflik1923
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 25

Expert Comment

by:kieran_b
ID: 21863976
Yeah, I would be hesitant to click yes on the second one - say no, cancel out, then make this modification to the GFI steps;

7. (still in the advanced tab) select all "deny" entries at the top, and click remove - there will be about 5 of them

Then skip steps 8 and 9

What we are now doing is instead of messing with the permissions too much, we are just removing the deny restrictions on the admins - this will do only that, remove the block allowing admins to all mailboxes.  Anything that involves saying "Yes, I am happy to apply deny entries" like the GFI instructions, could do anything...

If you really want to reverse the process after you are done, you can then go back and add the deny rights again (reverse of what we did here)
0
 

Author Comment

by:afflik1923
ID: 21865464
Thanks for that.

I've think I'm made things a bit confusing with the way I've ordered the screen shots. It seems you are most worried about the "dialogue-warning-1.jpg".
This one I was not too worried about as it occured in testing, but maybe I should be worried about it.

I had a response from GFI tech support on the subject and they seem to say I have to follow their procedure and that if I follow the second step it will reverse the changes anyway

Would you agree with that? Also do you know of any sources that will help me understand why changing permissions could slow things down (As shown in "dialogue-warning-2.jpg".)
0
 
LVL 25

Accepted Solution

by:
kieran_b earned 500 total points
ID: 21870344
It will only slow things down noticeably if you have thousands and thousands of objects (users)

For giving administrators mailbox access, this guide is the winner -> http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
0
MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

 

Author Comment

by:afflik1923
ID: 21870370
Great stuff. I'll cehck it out. There are about 70 users in this company so I assume I have nothing to worry about then, right?
0
 
LVL 25

Expert Comment

by:kieran_b
ID: 21870383
70 is not a problem
0
 

Author Closing Comment

by:afflik1923
ID: 31470489
I implemented the changes as explained in th GFI manual and it seemed to have no ill effect on performance or anything else as far as I know. So thanks for the input.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question