Solved

Disable Option To Open Other User's Folders in Outlook

Posted on 2014-02-07
3
615 Views
Last Modified: 2014-02-15
Good Afternoon,

We have a Windows environment with a SBS 2011 server with Exchange 2007.

There is one Outlook 2007 user in particular who for some reason, her email folders can be seen by other Exchange users if they Open it (File -> Open -> Other User's Folder.) When I tested this with other users, it was possible to view everyone's folders.

I looked in the Exchange Management Tool but I didn't see any signs of these folders being shared. I looked in her Outlook Security settings and I noticed that "Authenticated Users" are allowed to "Read Exchange Information", among other permissions.

My question is... Are there other security settings (client side or server side) that can prevent users from viewing each others' email folders?
0
Comment
Question by:mfrieder
  • 2
3 Comments
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 39843274
You have Exchange 2007 running on an SBS2011 server?  That's unusual and I'm going to assume that this means that it was a manual install of some kind, not installed as part of the SBS2011 installation, which includes Exchange 2010.  

It sound to me as though there's some type of misconfiguration here.  The only way that a user would be able to open another user's mailbox folders would be for them to be given explicit permission at the Exchange mailbox level or by a user setting permissions in Outlook.  So, there are two places to look:

1.  In the Exchange System Management console, drill down to the mailbox level.  Right-click one of the problem mailboxes and go to Manage Full Access Permissions. Check the list to see if certain users or a group that includes all users is on this list.  Do the same with the Manage Send As Permissions.

2.  If you don't find anything there, then go to the user's Outlook application, right-click on their top-level mailbox and go to Properties. Look at the Permissions tab for any users that have rights to open this folder. Do the same with other folders within Outlook to find any locally set permissions.

There's a third place to look, but that's a bit more complicated, so for now just check those two areas.

I'm not sure what you're referring to as "Outlook Security."  If you mean the security settings on the user's active directory account, it is normal for Authenticated Users to have Read Exchange Information permissions to every mailbox.
0
 

Accepted Solution

by:
mfrieder earned 0 total points
ID: 39848115
Yes, I looked into her Outlook app and in the properties for her Inbox it had "Default" with the "Owner" level access. I deleted Default and added her own username as "Owner" and it worked. Now even if someone pulled up her inbox, they won't see anything.
0
 

Author Closing Comment

by:mfrieder
ID: 39861150
Because I figured it out.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick guide on how to use Group Policy to create a custom power plan and set it active on Windows 7.
In this step by step procedure, you will come to know the details of creating an Outlook meeting in 2007, 2010, 2013 & 2016.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question