Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 253
  • Last Modified:

Is there a way to remotely manage permissions for inbox, calendar and contacts in Outlook/Exchange 2003?

I work in a Microsoft Exchange 2003 environment with Microsoft Outlook 2003.  Due to the nature of our industry we receive requests on a daily basis to modify permissions to an individuals inbox, calendar and/or contacts.

I have found a varying degree of ways to view different information such as PFDAVAdmin as well as the below batch file code however, none of them give me what I truly need; an easy way to remove a person from the permissions/sharing of another users calendar/contacts/mailbox and/or add another person.

Is there anything out there that does this?
I am open to VBScript, WMI, VBA, CScript, BAT, anything at this point.
cd\
ldifde -f delegates.txt -l name,publicDelegates,publicDelegatesBL -r "(|(publicDelegates=*)(publicDelegatesBL=*))"
delegates.txt
exit

Open in new window

0
LouSch7
Asked:
LouSch7
  • 2
  • 2
1 Solution
 
LaserSpotCommented:
You could change the Information Store permissions to give yourself full access to all mailboxes, then when you need to make a change, add the account to your Outlook profile and make the change from Outlook. Turn off the reading pane if you don't want to see their e-mail.
0
 
LouSch7Author Commented:
We have thought about that in the past and the problem is that I work for a Law Firm in which confidentiality out weighs everything else.  If I have full access to the mailboxes I have no way to prove that I did or didn't do something in regards to their email/correspondence.
0
 
LaserSpotCommented:
I assume you have full access to the server, so you probably do have full access to all the mailboxes even if you don't take advantage of it. Being able to give yourself access is the same as having access. You could turn on AD permission auditing, but I don't think you will ever need to prove that you did or didn't change permissions on a folder. I usually turn off the reading pane so no one thinks I'm reading messages.

You might need to prove when an e-mail was sent or received. For this you need a mail archiving system. Upgrading to Exchange 2010 would give you more archiving, auditing and compliance options (like Litigation Hold). The Exchange Management Shell would give you more scripting options.

As far as confidentiality, no one should assume that a regular e-mail is guaranteed to be confidential; maybe a lawyer could say more. I recommend that highly confidential documents be saved with a password before they're transmitted over e-mail (of course the password shouldn't be transmitted by e-mail).
0
 
LouSch7Author Commented:
Understand your sentiments but the "politics" here aren't based on hard facts of how computers actually work.  I recently stumbled upon PFDAVAdmin which provides a way for accomplishing this.  Unfortunately it does provide me with a way to do via an ASP Web Interface however, it does at least allow me to change permissions on outlook items without granting permissions to myself.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now