Solved

Exchange mailbox pemissions - Explanation needed.

Posted on 2008-06-25
6
204 Views
Last Modified: 2011-10-19
Hi,
I've recenlty installed a GFI Mail Archiver tool and the current archiving is working well.
However, I'm trying to now archive emails that are in Exchange prior to enabling the journaling mailbox.

GFI documentation details a change I must make to give administrator permission to "receive as" and "send as" all mailboxes
http://kbase.gfi.com/showarticle.asp?id=KBID003038

All worked fine in virtual server however on the live server, where there have already been complaints of performance issues. I got two dialog warnings which have scarred me to proceed.

I have put the 2nd warning first below as this is the one that scares me most. I do not really understand it and would welcome comments as to whether I should be worried and where I can learn more about this.

Thanks

dialogue-warning2.JPG
dialogue-warning1.JPG
0
Comment
Question by:afflik1923
  • 3
  • 3
6 Comments
 
LVL 25

Expert Comment

by:kieran_b
Comment Utility
Yeah, I would be hesitant to click yes on the second one - say no, cancel out, then make this modification to the GFI steps;

7. (still in the advanced tab) select all "deny" entries at the top, and click remove - there will be about 5 of them

Then skip steps 8 and 9

What we are now doing is instead of messing with the permissions too much, we are just removing the deny restrictions on the admins - this will do only that, remove the block allowing admins to all mailboxes.  Anything that involves saying "Yes, I am happy to apply deny entries" like the GFI instructions, could do anything...

If you really want to reverse the process after you are done, you can then go back and add the deny rights again (reverse of what we did here)
0
 

Author Comment

by:afflik1923
Comment Utility
Thanks for that.

I've think I'm made things a bit confusing with the way I've ordered the screen shots. It seems you are most worried about the "dialogue-warning-1.jpg".
This one I was not too worried about as it occured in testing, but maybe I should be worried about it.

I had a response from GFI tech support on the subject and they seem to say I have to follow their procedure and that if I follow the second step it will reverse the changes anyway

Would you agree with that? Also do you know of any sources that will help me understand why changing permissions could slow things down (As shown in "dialogue-warning-2.jpg".)
0
 
LVL 25

Accepted Solution

by:
kieran_b earned 500 total points
Comment Utility
It will only slow things down noticeably if you have thousands and thousands of objects (users)

For giving administrators mailbox access, this guide is the winner -> http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:afflik1923
Comment Utility
Great stuff. I'll cehck it out. There are about 70 users in this company so I assume I have nothing to worry about then, right?
0
 
LVL 25

Expert Comment

by:kieran_b
Comment Utility
70 is not a problem
0
 

Author Closing Comment

by:afflik1923
Comment Utility
I implemented the changes as explained in th GFI manual and it seemed to have no ill effect on performance or anything else as far as I know. So thanks for the input.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now