Solved

Is there a way to remotely manage permissions for inbox, calendar and contacts in Outlook/Exchange 2003?

Posted on 2010-09-13
4
249 Views
Last Modified: 2012-05-10
I work in a Microsoft Exchange 2003 environment with Microsoft Outlook 2003.  Due to the nature of our industry we receive requests on a daily basis to modify permissions to an individuals inbox, calendar and/or contacts.

I have found a varying degree of ways to view different information such as PFDAVAdmin as well as the below batch file code however, none of them give me what I truly need; an easy way to remove a person from the permissions/sharing of another users calendar/contacts/mailbox and/or add another person.

Is there anything out there that does this?
I am open to VBScript, WMI, VBA, CScript, BAT, anything at this point.
cd\
ldifde -f delegates.txt -l name,publicDelegates,publicDelegatesBL -r "(|(publicDelegates=*)(publicDelegatesBL=*))"
delegates.txt
exit

Open in new window

0
Comment
Question by:LouSch7
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 9

Accepted Solution

by:
LaserSpot earned 500 total points
ID: 33668637
You could change the Information Store permissions to give yourself full access to all mailboxes, then when you need to make a change, add the account to your Outlook profile and make the change from Outlook. Turn off the reading pane if you don't want to see their e-mail.
0
 
LVL 3

Author Comment

by:LouSch7
ID: 33671444
We have thought about that in the past and the problem is that I work for a Law Firm in which confidentiality out weighs everything else.  If I have full access to the mailboxes I have no way to prove that I did or didn't do something in regards to their email/correspondence.
0
 
LVL 9

Expert Comment

by:LaserSpot
ID: 33678098
I assume you have full access to the server, so you probably do have full access to all the mailboxes even if you don't take advantage of it. Being able to give yourself access is the same as having access. You could turn on AD permission auditing, but I don't think you will ever need to prove that you did or didn't change permissions on a folder. I usually turn off the reading pane so no one thinks I'm reading messages.

You might need to prove when an e-mail was sent or received. For this you need a mail archiving system. Upgrading to Exchange 2010 would give you more archiving, auditing and compliance options (like Litigation Hold). The Exchange Management Shell would give you more scripting options.

As far as confidentiality, no one should assume that a regular e-mail is guaranteed to be confidential; maybe a lawyer could say more. I recommend that highly confidential documents be saved with a password before they're transmitted over e-mail (of course the password shouldn't be transmitted by e-mail).
0
 
LVL 3

Author Comment

by:LouSch7
ID: 33684910
Understand your sentiments but the "politics" here aren't based on hard facts of how computers actually work.  I recently stumbled upon PFDAVAdmin which provides a way for accomplishing this.  Unfortunately it does provide me with a way to do via an ASP Web Interface however, it does at least allow me to change permissions on outlook items without granting permissions to myself.
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question