Solved

Is there a way to remotely manage permissions for inbox, calendar and contacts in Outlook/Exchange 2003?

Posted on 2010-09-13
4
247 Views
Last Modified: 2012-05-10
I work in a Microsoft Exchange 2003 environment with Microsoft Outlook 2003.  Due to the nature of our industry we receive requests on a daily basis to modify permissions to an individuals inbox, calendar and/or contacts.

I have found a varying degree of ways to view different information such as PFDAVAdmin as well as the below batch file code however, none of them give me what I truly need; an easy way to remove a person from the permissions/sharing of another users calendar/contacts/mailbox and/or add another person.

Is there anything out there that does this?
I am open to VBScript, WMI, VBA, CScript, BAT, anything at this point.
cd\
ldifde -f delegates.txt -l name,publicDelegates,publicDelegatesBL -r "(|(publicDelegates=*)(publicDelegatesBL=*))"
delegates.txt
exit

Open in new window

0
Comment
Question by:LouSch7
  • 2
  • 2
4 Comments
 
LVL 9

Accepted Solution

by:
LaserSpot earned 500 total points
ID: 33668637
You could change the Information Store permissions to give yourself full access to all mailboxes, then when you need to make a change, add the account to your Outlook profile and make the change from Outlook. Turn off the reading pane if you don't want to see their e-mail.
0
 
LVL 3

Author Comment

by:LouSch7
ID: 33671444
We have thought about that in the past and the problem is that I work for a Law Firm in which confidentiality out weighs everything else.  If I have full access to the mailboxes I have no way to prove that I did or didn't do something in regards to their email/correspondence.
0
 
LVL 9

Expert Comment

by:LaserSpot
ID: 33678098
I assume you have full access to the server, so you probably do have full access to all the mailboxes even if you don't take advantage of it. Being able to give yourself access is the same as having access. You could turn on AD permission auditing, but I don't think you will ever need to prove that you did or didn't change permissions on a folder. I usually turn off the reading pane so no one thinks I'm reading messages.

You might need to prove when an e-mail was sent or received. For this you need a mail archiving system. Upgrading to Exchange 2010 would give you more archiving, auditing and compliance options (like Litigation Hold). The Exchange Management Shell would give you more scripting options.

As far as confidentiality, no one should assume that a regular e-mail is guaranteed to be confidential; maybe a lawyer could say more. I recommend that highly confidential documents be saved with a password before they're transmitted over e-mail (of course the password shouldn't be transmitted by e-mail).
0
 
LVL 3

Author Comment

by:LouSch7
ID: 33684910
Understand your sentiments but the "politics" here aren't based on hard facts of how computers actually work.  I recently stumbled upon PFDAVAdmin which provides a way for accomplishing this.  Unfortunately it does provide me with a way to do via an ASP Web Interface however, it does at least allow me to change permissions on outlook items without granting permissions to myself.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
In this step by step procedure, you will come to know the details of creating an Outlook meeting in 2007, 2010, 2013 & 2016.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question