Solved

Exchange Clanders

Posted on 2014-02-21
8
113 Views
Last Modified: 2014-02-26
Please help

We have a client who is a PA and they are able to view Different Company calendars

The PA Company Recently had a complaint saying that an unidentified user has access to their Calender, When I looked at the PA's PC I noticed that they were in the same group.

Would this allow them to view other Companies calenders who are on completely different exchange servers?
0
Comment
Question by:pepps11976
  • 4
  • 4
8 Comments
 
LVL 5

Expert Comment

by:Dave Gould
Comment Utility
Who has acces to the calendar? Check via powershell.
Get-MailboxFolderPermission "mailboxnamw:\calendar"

If the result gives a group and not just individuals then you are giving rights to all members of the group. Is this what you meant ?
0
 

Author Comment

by:pepps11976
Comment Utility
No The PA lady was sent a request to view Client 1's calendar which she accepted,

The PA lady also has access to Client 2's calendar, completely separate Organisation.

Client 1 is saying that client 2 has access to her calendar even though they do not know each other is this possible.

The only relationship is The PA Lady which can view both their calenders from her machine
0
 
LVL 5

Expert Comment

by:Dave Gould
Comment Utility
Not unless access has been explicitly given either by client 1 to client 2 or by the exchange admin.
Running Get-MailboxFolderPermission against client 1's calendar will tell you who has access to it. What makes client 1 think that client 2 has access? Has she looked at delegations or checked the access rights tab of the calendar properties ?
0
 

Author Comment

by:pepps11976
Comment Utility
I have attached a Screen Shot of the client's computer

Image
The one on the End Paul Nagle in Danielle Millar is the calendar that has appeared on Clients 1's Machine

This Calendar does exixt on Danielle Millar's Machine so how would it have gotten itself onto client 1
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 5

Expert Comment

by:Dave Gould
Comment Utility
She can see tha calendar but can she see appointments?
In order to see who can see what, the client should right click on her calendar and select properties. Checking the Access tab will show who can see what. Maybe default is set higher than availability?
As administrator, you can do this from the Exchange powershell console withe the Get-MailboxFolderPermission  cmdlet.
ie Get-MailboxFolderPermission "mailbox:\calendar" | fl

By default it is easy to add anybody's calendar to your outlook client but restricting who can actually see the appointments is down to the individual.
As you are running a multiclient exchange server, maybe the default for everybody should be "no access" and "availability" only given to members of the same client group.
0
 

Author Comment

by:pepps11976
Comment Utility
The concern is Client 1 who's screen shot has been posted does not even know the person whos calendar she has (Paul Nagle)

So she is concerned

a: How did this calendar get there
b: She is worried he can see her information, they are both on completely different exchange servers to which I do not have access.

The only common thing between them both is the PA Lady (Danielle) does have access to both calendars on her machine, she is the PA for these clients she works from Home and both Client 1 and Client 2 Paul Nagle) work at two completely separate companies.

So how is it possible that Client 1 can see (paul Nagles calendar?

john
0
 
LVL 5

Accepted Solution

by:
Dave Gould earned 500 total points
Comment Utility
The fact that the calendar has been added to the clients outlook can only be explained by the PA. She was probably working for client 1 but needed to check something for Paul Nagle and opened his calendar whilst still connected to Client 1's account. There is no way that Paul Nagle's calendar appeared on Client 1's outlook without human intervention on client 1's outlook. Danielle must have added it herself.
You say that the 2 clients are not on the same server but are they under the same Exchange Organization Configuration?
As I said before, if client 1 is worried that Paul Nagle has access to her calendar, she just needs to check the properties/access tab of her calendar. Paul Nagle is undoubtedly under the "default Users" option.
0
 

Author Comment

by:pepps11976
Comment Utility
Ok I will get her to check the Permissions etc.

Could you just explain Again how this could have possible happened so just to clarify

There are 3 people involved here

Client 1 and Client 2 and the PA who does work for Both all of them on Different Exchange Organisations.

They all work from home none of them have access to the other PC

And client 1 does not know Client 2 yet The PA person has both there calenders on Her machine is the only Similarity
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now