Solved

Is there a way to remotely manage permissions for inbox, calendar and contacts in Outlook/Exchange 2003?

Posted on 2010-09-13
4
245 Views
Last Modified: 2012-05-10
I work in a Microsoft Exchange 2003 environment with Microsoft Outlook 2003.  Due to the nature of our industry we receive requests on a daily basis to modify permissions to an individuals inbox, calendar and/or contacts.

I have found a varying degree of ways to view different information such as PFDAVAdmin as well as the below batch file code however, none of them give me what I truly need; an easy way to remove a person from the permissions/sharing of another users calendar/contacts/mailbox and/or add another person.

Is there anything out there that does this?
I am open to VBScript, WMI, VBA, CScript, BAT, anything at this point.
cd\
ldifde -f delegates.txt -l name,publicDelegates,publicDelegatesBL -r "(|(publicDelegates=*)(publicDelegatesBL=*))"
delegates.txt
exit

Open in new window

0
Comment
Question by:LouSch7
  • 2
  • 2
4 Comments
 
LVL 9

Accepted Solution

by:
LaserSpot earned 500 total points
ID: 33668637
You could change the Information Store permissions to give yourself full access to all mailboxes, then when you need to make a change, add the account to your Outlook profile and make the change from Outlook. Turn off the reading pane if you don't want to see their e-mail.
0
 
LVL 3

Author Comment

by:LouSch7
ID: 33671444
We have thought about that in the past and the problem is that I work for a Law Firm in which confidentiality out weighs everything else.  If I have full access to the mailboxes I have no way to prove that I did or didn't do something in regards to their email/correspondence.
0
 
LVL 9

Expert Comment

by:LaserSpot
ID: 33678098
I assume you have full access to the server, so you probably do have full access to all the mailboxes even if you don't take advantage of it. Being able to give yourself access is the same as having access. You could turn on AD permission auditing, but I don't think you will ever need to prove that you did or didn't change permissions on a folder. I usually turn off the reading pane so no one thinks I'm reading messages.

You might need to prove when an e-mail was sent or received. For this you need a mail archiving system. Upgrading to Exchange 2010 would give you more archiving, auditing and compliance options (like Litigation Hold). The Exchange Management Shell would give you more scripting options.

As far as confidentiality, no one should assume that a regular e-mail is guaranteed to be confidential; maybe a lawyer could say more. I recommend that highly confidential documents be saved with a password before they're transmitted over e-mail (of course the password shouldn't be transmitted by e-mail).
0
 
LVL 3

Author Comment

by:LouSch7
ID: 33684910
Understand your sentiments but the "politics" here aren't based on hard facts of how computers actually work.  I recently stumbled upon PFDAVAdmin which provides a way for accomplishing this.  Unfortunately it does provide me with a way to do via an ASP Web Interface however, it does at least allow me to change permissions on outlook items without granting permissions to myself.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a User Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Mailb…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now