?
Solved

Disable Option To Open Other User's Folders in Outlook

Posted on 2014-02-07
3
Medium Priority
?
670 Views
Last Modified: 2014-02-15
Good Afternoon,

We have a Windows environment with a SBS 2011 server with Exchange 2007.

There is one Outlook 2007 user in particular who for some reason, her email folders can be seen by other Exchange users if they Open it (File -> Open -> Other User's Folder.) When I tested this with other users, it was possible to view everyone's folders.

I looked in the Exchange Management Tool but I didn't see any signs of these folders being shared. I looked in her Outlook Security settings and I noticed that "Authenticated Users" are allowed to "Read Exchange Information", among other permissions.

My question is... Are there other security settings (client side or server side) that can prevent users from viewing each others' email folders?
0
Comment
Question by:mfrieder
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 39843274
You have Exchange 2007 running on an SBS2011 server?  That's unusual and I'm going to assume that this means that it was a manual install of some kind, not installed as part of the SBS2011 installation, which includes Exchange 2010.  

It sound to me as though there's some type of misconfiguration here.  The only way that a user would be able to open another user's mailbox folders would be for them to be given explicit permission at the Exchange mailbox level or by a user setting permissions in Outlook.  So, there are two places to look:

1.  In the Exchange System Management console, drill down to the mailbox level.  Right-click one of the problem mailboxes and go to Manage Full Access Permissions. Check the list to see if certain users or a group that includes all users is on this list.  Do the same with the Manage Send As Permissions.

2.  If you don't find anything there, then go to the user's Outlook application, right-click on their top-level mailbox and go to Properties. Look at the Permissions tab for any users that have rights to open this folder. Do the same with other folders within Outlook to find any locally set permissions.

There's a third place to look, but that's a bit more complicated, so for now just check those two areas.

I'm not sure what you're referring to as "Outlook Security."  If you mean the security settings on the user's active directory account, it is normal for Authenticated Users to have Read Exchange Information permissions to every mailbox.
0
 

Accepted Solution

by:
mfrieder earned 0 total points
ID: 39848115
Yes, I looked into her Outlook app and in the properties for her Inbox it had "Default" with the "Owner" level access. I deleted Default and added her own username as "Owner" and it worked. Now even if someone pulled up her inbox, they won't see anything.
0
 

Author Closing Comment

by:mfrieder
ID: 39861150
Because I figured it out.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
This article describes how to import Lotus Notes Contacts into Outlook 2016, 2013, 2010 and 2007 etc. with a few manual steps. You can easily export and migrate Lotus Notes contacts into Microsoft Outlook without having to use any third party tools.
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question