Solved

Any securityissues in having external mail in dist/sec group?

Posted on 2008-10-24
4
280 Views
Last Modified: 2012-05-05
Hi,

I have an external consultant who has a user in our AD because he need access to some specifik folders.
Now he needs to be on one of our dist-groups. The problem is that this dist-group also is a sec-group, for some folders he are not allowed access to.

My plan was put his private mail (as a contact) into the dist/sec-group, should that give any securityissues?

Any other good Ideas?
0
Comment
Question by:mprs
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 22794687
No but i am a bit concerned if this group is a security group and has access to important folders - why does this consultant want to be part of it. You could make things clear at this level, however having contacts created a good option.

Else, if things are a bit not in your favour create a contact with his email address and add that to the SG and not his user account.

Mean while i am testing something will give you the result in a while
0
 
LVL 33

Assisted Solution

by:Exchange_Geek
Exchange_Geek earned 20 total points
ID: 22794719
Ok here is what i was doing - there was an option of forward to - in delivery options of exchange general tab of users properties - when you add a userB account - this changes attribute altRecipient in AD and adds DN of that particular userB to attributes of userA also another change is done to deliveryMechanism changes to True.

I did the same change using ADSIEDIT - however using message tracking i found out Exchange was smart - it threw an NDR, so bad luck.

Stick to the contacts plan.
0
 

Accepted Solution

by:
mprs earned 0 total points
ID: 22862454
I'll stick to my contact plan
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Gift cards are not a new concept - it's been around for a very long time.  Undoubtedly, over the past you have received such a card or purchased one for a friend or relative.  Are you aware that you've been feeding the machine?  If not, read on :)
This article explains how to install and use the NTBackup utility that comes with Windows Server.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question