Discussion Locked

Exchange 2000 mailbox permissions

0 helpful
8 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

In Exchange 2000 mailbox rights, all mailboxes are inheriting read permission's from the parent object, and anybody who logs onto a pc can see that users mail! However, I cannot find a way to uncheck the 'allow read permission check box' as it is greyed out. Is it a bug. Anyone any ideas.
Thanks in advance.

8 replies

by lee.paxton

Try countering the allow checkboxes by checking the Deny checkbox.

I've been trying to find out where the parent object for this is, and have as yet, been unable to find it. Logic would dictate that a deny set above an allow would conter it, butsince when has logic been a part of MS's thinking.

Hope this helps,

Lee J Paxton.

by antsoair

Sounds like NTFS permissions. When you open the security box then is a check box at the bottom that says, ?Allow inheritable permissions from parent to propagate to this object?.

Uncheck this box and you will be asked if you want to copy or remove the permissions. If you choose copy you can then change them to the way you want them or remove them completely. If you choose remove you will then need to setup the appropriate permissions.

by frobo

Hi,

You wrote:
In Exchange 2000 mailbox rights, all mailboxes are inheriting read permission's from the parent.
This is right, cause People must share some Information on Calendar ans so on.
But that everyone could Open the MBX of someone other is not a default configuration of E2k. This must be enabled on the Private Information Store of that Server who holds the MBX.
Here where you can look to turn of this "feature":

In Exchange 2000, organization administrators and domain administrators are specifically denied Receive As and Send As permissions.
To change permissions on the administrator account :
1. Log on by using the administrator account, and then start Exchange System Manager.
2. Browse to the following location:
Administrative Groups/Servers///
3. Right-click the store name and click Properties.
4. Click the Security tab, and then click the administrator account.
5. In the Permissions section, in the Allow column, click tu uncheck the check boxes next to Receive As and Send As, and then click OK.

Regards

Frobo

This discussion is closed to new replies.