Solved

Any securityissues in having external mail in dist/sec group?

Posted on 2008-10-24
4
276 Views
Last Modified: 2012-05-05
Hi,

I have an external consultant who has a user in our AD because he need access to some specifik folders.
Now he needs to be on one of our dist-groups. The problem is that this dist-group also is a sec-group, for some folders he are not allowed access to.

My plan was put his private mail (as a contact) into the dist/sec-group, should that give any securityissues?

Any other good Ideas?
0
Comment
Question by:mprs
  • 2
4 Comments
 
LVL 33

Expert Comment

by:Exchange_Geek
Comment Utility
No but i am a bit concerned if this group is a security group and has access to important folders - why does this consultant want to be part of it. You could make things clear at this level, however having contacts created a good option.

Else, if things are a bit not in your favour create a contact with his email address and add that to the SG and not his user account.

Mean while i am testing something will give you the result in a while
0
 
LVL 33

Assisted Solution

by:Exchange_Geek
Exchange_Geek earned 20 total points
Comment Utility
Ok here is what i was doing - there was an option of forward to - in delivery options of exchange general tab of users properties - when you add a userB account - this changes attribute altRecipient in AD and adds DN of that particular userB to attributes of userA also another change is done to deliveryMechanism changes to True.

I did the same change using ADSIEDIT - however using message tracking i found out Exchange was smart - it threw an NDR, so bad luck.

Stick to the contacts plan.
0
 

Accepted Solution

by:
mprs earned 0 total points
Comment Utility
I'll stick to my contact plan
0

Featured Post

Do email signature updates give you a headache?

Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
The Bounty Board allows you to request an article or video on any technical topic, or fulfill a bounty request to earn points. Watch this video to learn how to use the Bounty Board to get the content you want, earn points, and browse submitted bount…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now