Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Exchange mailbox pemissions - Explanation needed.

Posted on 2008-06-25
6
Medium Priority
?
258 Views
Last Modified: 2011-10-19
Hi,
I've recenlty installed a GFI Mail Archiver tool and the current archiving is working well.
However, I'm trying to now archive emails that are in Exchange prior to enabling the journaling mailbox.

GFI documentation details a change I must make to give administrator permission to "receive as" and "send as" all mailboxes
http://kbase.gfi.com/showarticle.asp?id=KBID003038

All worked fine in virtual server however on the live server, where there have already been complaints of performance issues. I got two dialog warnings which have scarred me to proceed.

I have put the 2nd warning first below as this is the one that scares me most. I do not really understand it and would welcome comments as to whether I should be worried and where I can learn more about this.

Thanks

dialogue-warning2.JPG
dialogue-warning1.JPG
0
Comment
Question by:afflik1923
  • 3
  • 3
6 Comments
 
LVL 25

Expert Comment

by:kieran_b
ID: 21863976
Yeah, I would be hesitant to click yes on the second one - say no, cancel out, then make this modification to the GFI steps;

7. (still in the advanced tab) select all "deny" entries at the top, and click remove - there will be about 5 of them

Then skip steps 8 and 9

What we are now doing is instead of messing with the permissions too much, we are just removing the deny restrictions on the admins - this will do only that, remove the block allowing admins to all mailboxes.  Anything that involves saying "Yes, I am happy to apply deny entries" like the GFI instructions, could do anything...

If you really want to reverse the process after you are done, you can then go back and add the deny rights again (reverse of what we did here)
0
 

Author Comment

by:afflik1923
ID: 21865464
Thanks for that.

I've think I'm made things a bit confusing with the way I've ordered the screen shots. It seems you are most worried about the "dialogue-warning-1.jpg".
This one I was not too worried about as it occured in testing, but maybe I should be worried about it.

I had a response from GFI tech support on the subject and they seem to say I have to follow their procedure and that if I follow the second step it will reverse the changes anyway

Would you agree with that? Also do you know of any sources that will help me understand why changing permissions could slow things down (As shown in "dialogue-warning-2.jpg".)
0
 
LVL 25

Accepted Solution

by:
kieran_b earned 2000 total points
ID: 21870344
It will only slow things down noticeably if you have thousands and thousands of objects (users)

For giving administrators mailbox access, this guide is the winner -> http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:afflik1923
ID: 21870370
Great stuff. I'll cehck it out. There are about 70 users in this company so I assume I have nothing to worry about then, right?
0
 
LVL 25

Expert Comment

by:kieran_b
ID: 21870383
70 is not a problem
0
 

Author Closing Comment

by:afflik1923
ID: 31470489
I implemented the changes as explained in th GFI manual and it seemed to have no ill effect on performance or anything else as far as I know. So thanks for the input.
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scripts are great for performing batch jobs against users, however sometimes the GUI is all you need.
In my humble opinion (IMHO), TouchDown from Symantec is the best in class for this type of application, but Symantec has end-of-lifed it and although one can keep using it, it will no longer be supported or upgraded.  Time to look for alternatives t…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question