Solved

Any securityissues in having external mail in dist/sec group?

Posted on 2008-10-24
4
279 Views
Last Modified: 2012-05-05
Hi,

I have an external consultant who has a user in our AD because he need access to some specifik folders.
Now he needs to be on one of our dist-groups. The problem is that this dist-group also is a sec-group, for some folders he are not allowed access to.

My plan was put his private mail (as a contact) into the dist/sec-group, should that give any securityissues?

Any other good Ideas?
0
Comment
Question by:mprs
  • 2
4 Comments
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 22794687
No but i am a bit concerned if this group is a security group and has access to important folders - why does this consultant want to be part of it. You could make things clear at this level, however having contacts created a good option.

Else, if things are a bit not in your favour create a contact with his email address and add that to the SG and not his user account.

Mean while i am testing something will give you the result in a while
0
 
LVL 33

Assisted Solution

by:Exchange_Geek
Exchange_Geek earned 20 total points
ID: 22794719
Ok here is what i was doing - there was an option of forward to - in delivery options of exchange general tab of users properties - when you add a userB account - this changes attribute altRecipient in AD and adds DN of that particular userB to attributes of userA also another change is done to deliveryMechanism changes to True.

I did the same change using ADSIEDIT - however using message tracking i found out Exchange was smart - it threw an NDR, so bad luck.

Stick to the contacts plan.
0
 

Accepted Solution

by:
mprs earned 0 total points
ID: 22862454
I'll stick to my contact plan
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Gift cards are not a new concept - it's been around for a very long time.  Undoubtedly, over the past you have received such a card or purchased one for a friend or relative.  Are you aware that you've been feeding the machine?  If not, read on :)
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question