Hi,
You wrote:
In Exchange 2000 mailbox rights, all mailboxes are inheriting read permission's from the parent.
This is right, cause People must share some Information on Calendar ans so on.
But that everyone could Open the MBX of someone other is not a default configuration of E2k. This must be enabled on the Private Information Store of that Server who holds the MBX.
Here where you can look to turn of this "feature":
In Exchange 2000, organization administrators and domain administrators are specifically denied Receive As and Send As permissions.
To change permissions on the administrator account :
1. Log on by using the administrator account, and then start Exchange System Manager.
2. Browse to the following location:
Administrative Groups/Servers///
3. Right-click the store name and click Properties.
4. Click the Security tab, and then click the administrator account.
5. In the Permissions section, in the Allow column, click tu uncheck the check boxes next to Receive As and Send As, and then click OK.
Regards
Frobo