Software·43,969 discussions

Exchange Server, mailbox permissions..

Locked

I notice that users in my WinNT 4.0 domain using Exchange server 5.5, that are members of the domain admins group, are able to view the contents of other users mailboxes despite the fact that the other users mailboxes are NOT shared or delegated. Is there any way to Disable this feature. We do not want anybody to view the contents of others mailboxes, even domain admins, without prior consent of the mailbox owner.

Thanks,
Kurt G.

Topic

Exchange Server, mailbox permissions..

In reply to Exchange Server, mailbox permissions..

You have probably granted your domain admins group “Service Account Admin” permissions to your site. An account with this permission can do pretty much anything including view other people’s inboxes. To remove these permissions, first make sure you have the permissions page in the properties window of your site. If you don’t, in Exchange Administrator, go to tools/options/permissions tab, and flag the check box for “Show permissions page for all objects”. The go to the properties for your site, permissions tab, and make sure domain admins isn’t set for Service Account Admin.

I hope this helps.

Exchange Server, mailbox permissions..

In reply to Exchange Server, mailbox permissions..

Thank you!!

Kurt G.

Exchange Server, mailbox permissions..

In reply to Exchange Server, mailbox permissions..

The above answer was right on but I want to give you something to think of. If you are using any sort of backup software that goes into the exchange database to back up mailboxes an account will need the service permissions to do that. You can create an account like exchangebackup or to that effect and give it the permissions.

Exchange Server, mailbox permissions..

In reply to Exchange Server, mailbox permissions..

I appreciate your help.

Kurt G.

[Author]

Replies