Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 184
  • Last Modified:

MS EXchange 2003 Permissions

I have a situation where everybody seems to have the ability to open everyone's inbox in Outlook 2003. I have looked at the mailbox rights and it appears that every user has authenticated users with inheritted permissions to allow read of the mailbox.

Can you please tell me where these permissions are inherited from? And how to remove these rights from the individuals? I have tried a Deny permission on specific users and they can still open any mailbox they like?

Thanks
0
FattyPo
Asked:
FattyPo
  • 4
  • 3
1 Solution
 
Glen KnightCommented:
It could be set in any number of places.

Your best bet is to follow this guide snd see if you can find where it is set: http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm

obviously just follow the steps to help you find the permission.  Make a note if anything you change before you do it.
0
 
FattyPoAuthor Commented:
Thanks, it does appear that authenticated users have full rights in system manager\servername\properties security? As they are not set on any individuals mailbox.

0
 
Glen KnightCommented:
You said it was inherited on each user?
If so then it must be set at a higher level.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
Glen KnightCommented:
Sorry misread your post so you have confirmed it is set?
0
 
FattyPoAuthor Commented:
i have removed authenticated users from the security in the security tab, i have then checked the individuals mailboxes and the authenticated user has been removed. Should this remove the ability from any user to open any users mailbox?
0
 
FattyPoAuthor Commented:
I have just performed a gpupdate on my machine, i can no longer access any other individuals mailbox. Thanks for your help.
0
 
Glen KnightCommented:
Yes.
You may need to restart the Microsoft Exchange Information Store service for the change to take effect.
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now