Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


exchange security permissions

Posted on 2013-11-01
Medium Priority
Last Modified: 2014-01-13
Are there any tools/techniques to get a list of who has what security permissions over your exchange (2010) environment. I have more experience in RDBMS but exchange can still store sensitive data (in mail/folders), I presume there are default roles / groups for exchange security, so how do you go about getting a report of who has what permissions over your exchange.
Question by:pma111
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
LVL 52

Accepted Solution

Manpreet SIngh Khatra earned 2000 total points
ID: 39616346
Look you can do it with DSACLS or i have done with ADModify.net as well

- Rancy

Author Comment

ID: 39616358
Am I right in thinking there are default security roles/groups for exchange server security  as you get with other products like MSSQL , AD, vCenter etc etc etc.
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39616409
Yes with Exchange there are few default groups created in MESG OU in ActiveDirectoryUsers&Computers container

- Rancy

Author Comment

ID: 39616766
Rancy - just going back to your first points (DSACLS or i have done with ADModify.net) what sort of areas/objects were you checking permissions on with these tools, within your exchange environment? Did your analysis flag any open access to elements of exchange?

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Want to know how to use Exchange Server Eseutil command? Go through this article as it gives you the know-how.
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Suggested Courses

598 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question