Link to home
Start Free TrialLog in
Avatar of LouSch7
LouSch7Flag for United States of America

asked on

Is there a way to remotely manage permissions for inbox, calendar and contacts in Outlook/Exchange 2003?

I work in a Microsoft Exchange 2003 environment with Microsoft Outlook 2003.  Due to the nature of our industry we receive requests on a daily basis to modify permissions to an individuals inbox, calendar and/or contacts.

I have found a varying degree of ways to view different information such as PFDAVAdmin as well as the below batch file code however, none of them give me what I truly need; an easy way to remove a person from the permissions/sharing of another users calendar/contacts/mailbox and/or add another person.

Is there anything out there that does this?
I am open to VBScript, WMI, VBA, CScript, BAT, anything at this point.
cd\
ldifde -f delegates.txt -l name,publicDelegates,publicDelegatesBL -r "(|(publicDelegates=*)(publicDelegatesBL=*))"
delegates.txt
exit

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of LaserSpot
LaserSpot

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of LouSch7

ASKER

We have thought about that in the past and the problem is that I work for a Law Firm in which confidentiality out weighs everything else.  If I have full access to the mailboxes I have no way to prove that I did or didn't do something in regards to their email/correspondence.
Avatar of LaserSpot
LaserSpot

I assume you have full access to the server, so you probably do have full access to all the mailboxes even if you don't take advantage of it. Being able to give yourself access is the same as having access. You could turn on AD permission auditing, but I don't think you will ever need to prove that you did or didn't change permissions on a folder. I usually turn off the reading pane so no one thinks I'm reading messages.

You might need to prove when an e-mail was sent or received. For this you need a mail archiving system. Upgrading to Exchange 2010 would give you more archiving, auditing and compliance options (like Litigation Hold). The Exchange Management Shell would give you more scripting options.

As far as confidentiality, no one should assume that a regular e-mail is guaranteed to be confidential; maybe a lawyer could say more. I recommend that highly confidential documents be saved with a password before they're transmitted over e-mail (of course the password shouldn't be transmitted by e-mail).
Avatar of LouSch7

ASKER

Understand your sentiments but the "politics" here aren't based on hard facts of how computers actually work.  I recently stumbled upon PFDAVAdmin which provides a way for accomplishing this.  Unfortunately it does provide me with a way to do via an ASP Web Interface however, it does at least allow me to change permissions on outlook items without granting permissions to myself.