Solved

exchange 2010 mailbox - restrict access to user's own mailbox

Posted on 2013-06-06
5
1,126 Views
Last Modified: 2013-08-13
not sure if this is the best approach to accomplish the task, but here goes.

I have a Room mailbox, with 2 administrators to manage the calendar.

The Room calendar needs to be displayed on a "public" display - a monitor/TV in the office.

I need to have a "public access" user with the following restrictions:
- allowed to see the room calendar (read only)
- not allowed to send/rcv in its own mailbox (the public user, that is)
- not allowed access to its own mailbox folders

I'm thinking I need a second user/mailbox, who can open outlook and access the Room mailbox, and that's it - not access its own mail folders (Inbox, Calendar, Contacts, etc.) and not send/rcv any mail.

Or...(hopefully), there is an easier method to have a public-view of the Room mailbox.
0
Comment
Question by:snowdog_2112
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 43

Expert Comment

by:Amit
ID: 39226550
why you are giving admin level access to room mailbox. I suggest you to read room mailbox concept and how to use it.
0
 

Author Comment

by:snowdog_2112
ID: 39226702
That's not my question - but I appreciate the concern.

The issue is not who has access to the calendar currently.  

The issue is how best to create a "public view" on a device with public access (to employees, not to random people walking by), while preventing the Public Viewer from sending email to/from the account used to display the Room calendar.

In other words, we have a Room Calendar, and a PC connected to a TV so users can browse the Room Calendar - now I need to make sure that's *ALL* the public user can do - both on the Room Calendar and the account used to access Exchange.

Thanks.
0
 

Expert Comment

by:mwright5
ID: 39226717
change the room mailbox to a type shared using powershell and give calendar permission to the users putting on the display
0
 

Accepted Solution

by:
snowdog_2112 earned 0 total points
ID: 39226917
I don' think I'm explaining this effectively, I apologize for that.  Let me try it a different way.

The permissions are correct for the Room Calendar vis a vis the "public user".

My question is how to prevent the public user for accessing anything *except* the Room Calendar.

Example:
Room Calendar "user":  Room200Calendar

Public User: lunchroom

I have the Outlook profile configured on the PC for "lunchroom" - which displays the mail folders for the "lunchroom" mailbox.  The display is set up to show only the calendar for Room200Calendar.

However, there is currently nothing preventing users from switching the display to Mail, and sending an email from the "lunchroom" mailbox (or accessing Contacts, Tasks, etc).

I need to have the users be able to browse the Room200Calendar, but not anything in the "lunchroom" mailbox.

Hope that clears up the issue at hand - thanks!
0
 

Author Closing Comment

by:snowdog_2112
ID: 39404137
no offered solutions worked.  ended up with a low-tech solution.  Ask people not to mess with it.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
This video discusses moving either the default database or any database to a new volume.

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question