Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Exchange Clanders

Posted on 2014-02-21
8
118 Views
Last Modified: 2014-02-26
Please help

We have a client who is a PA and they are able to view Different Company calendars

The PA Company Recently had a complaint saying that an unidentified user has access to their Calender, When I looked at the PA's PC I noticed that they were in the same group.

Would this allow them to view other Companies calenders who are on completely different exchange servers?
0
Comment
Question by:pepps11976
  • 4
  • 4
8 Comments
 
LVL 5

Expert Comment

by:Dave Gould
ID: 39876677
Who has acces to the calendar? Check via powershell.
Get-MailboxFolderPermission "mailboxnamw:\calendar"

If the result gives a group and not just individuals then you are giving rights to all members of the group. Is this what you meant ?
0
 

Author Comment

by:pepps11976
ID: 39876741
No The PA lady was sent a request to view Client 1's calendar which she accepted,

The PA lady also has access to Client 2's calendar, completely separate Organisation.

Client 1 is saying that client 2 has access to her calendar even though they do not know each other is this possible.

The only relationship is The PA Lady which can view both their calenders from her machine
0
 
LVL 5

Expert Comment

by:Dave Gould
ID: 39876762
Not unless access has been explicitly given either by client 1 to client 2 or by the exchange admin.
Running Get-MailboxFolderPermission against client 1's calendar will tell you who has access to it. What makes client 1 think that client 2 has access? Has she looked at delegations or checked the access rights tab of the calendar properties ?
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:pepps11976
ID: 39885036
I have attached a Screen Shot of the client's computer

Image
The one on the End Paul Nagle in Danielle Millar is the calendar that has appeared on Clients 1's Machine

This Calendar does exixt on Danielle Millar's Machine so how would it have gotten itself onto client 1
0
 
LVL 5

Expert Comment

by:Dave Gould
ID: 39885055
She can see tha calendar but can she see appointments?
In order to see who can see what, the client should right click on her calendar and select properties. Checking the Access tab will show who can see what. Maybe default is set higher than availability?
As administrator, you can do this from the Exchange powershell console withe the Get-MailboxFolderPermission  cmdlet.
ie Get-MailboxFolderPermission "mailbox:\calendar" | fl

By default it is easy to add anybody's calendar to your outlook client but restricting who can actually see the appointments is down to the individual.
As you are running a multiclient exchange server, maybe the default for everybody should be "no access" and "availability" only given to members of the same client group.
0
 

Author Comment

by:pepps11976
ID: 39885065
The concern is Client 1 who's screen shot has been posted does not even know the person whos calendar she has (Paul Nagle)

So she is concerned

a: How did this calendar get there
b: She is worried he can see her information, they are both on completely different exchange servers to which I do not have access.

The only common thing between them both is the PA Lady (Danielle) does have access to both calendars on her machine, she is the PA for these clients she works from Home and both Client 1 and Client 2 Paul Nagle) work at two completely separate companies.

So how is it possible that Client 1 can see (paul Nagles calendar?

john
0
 
LVL 5

Accepted Solution

by:
Dave Gould earned 500 total points
ID: 39885168
The fact that the calendar has been added to the clients outlook can only be explained by the PA. She was probably working for client 1 but needed to check something for Paul Nagle and opened his calendar whilst still connected to Client 1's account. There is no way that Paul Nagle's calendar appeared on Client 1's outlook without human intervention on client 1's outlook. Danielle must have added it herself.
You say that the 2 clients are not on the same server but are they under the same Exchange Organization Configuration?
As I said before, if client 1 is worried that Paul Nagle has access to her calendar, she just needs to check the properties/access tab of her calendar. Paul Nagle is undoubtedly under the "default Users" option.
0
 

Author Comment

by:pepps11976
ID: 39885180
Ok I will get her to check the Permissions etc.

Could you just explain Again how this could have possible happened so just to clarify

There are 3 people involved here

Client 1 and Client 2 and the PA who does work for Both all of them on Different Exchange Organisations.

They all work from home none of them have access to the other PC

And client 1 does not know Client 2 yet The PA person has both there calenders on Her machine is the only Similarity
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question