Reset Exchange Default Permissions

Hi all,

I have inherited an SBS 2003 server - the client has issues with the fact that his staff can now Open/Other Users Folder in exchange and litterally open any users inbox.

Is there anyway i can reset the exchange server permissions to default? Or, does anyone have a list of what they should be so I can "start" over....

Thanks
Sean
LVL 1
SeanNijAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

theShaoCommented:
Chances are the users with access have had permissions set on the mailbox store or even the exchange server - check under Advanced Management --> Exchange --> Servers --> Right-click on your server name and select properties, and click the "Security" tab - Check that "Everyone" and "Authenticated USers" Have only "Special Permissions" and possibly "Create Named Properties..." enabled. Also check to see if "Domain users" or any specific users have been added to this list.
Also check under [server name] --> First Storage Group -->right-click on Mailbox Store --> go to the "Security" tab. Again check for permissions assigned to "Everyone", "Domain Users" and "Authenticated Users". This is the most common way to give users far-reaching access, the other thing that might have been done is adding users to the "Enterprise Admins" group.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
SeanNijAuthor Commented:
Thankyou!
0
ajahnkeCommented:
I have this same exact problem, although unfortunately it was the "Authenticated Users" and "Users" groups whose permissions were changed, so unfortunately just knowing that they should have "Special Permissions" vs. full control doesn't help. I know this doesn't help anyone else either, but if anyone happens to see this and could post the actual Special Permissions for these groups that would be great.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.