AD default permissions

[customgt]

hello, my AD default permissions got screwed up for when i create a new user.

When you go into the user, then exchange advanced tab, then mailbox rights all it has is 'Self' with "read permissions" and "Full mailbox access" checked.
SHould i have more then this, I seen on other ones it used to have:
Administrator
ANONYMOUS LOGON
Domain Admins
Domain Users
Enterprise Admins
Everyone
Exchange Domain Servers
FEATHERSERVER$
Mail Operators
SELF

This is on a SBS 2003 with exchange. Thier is another win2k3 standard server with sql at another location on this domain sharing the AD.

I wasnt sure if I need all thos permissions or not for the users...thanks!

 

[pagy]

Why is the SELF permission the only permission seen on the Mailbox Rights properties on Exchange 2000/2003 mailboxes?

http://www.petri.co.il/self_permission_on_exchange_mailboxes.htm

Paul
MCSE


"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[customgt]

cool thank you i forgot about that, i remember that now.

one thing i do notice, is it takes a long time after i add a user for it to propagate the email addresses for it in AD. It wont let me log on to exchange mail for that user until that is done, i assume this is a service that is ran every 4 hours or something? is thier a way i can make it propagate new users manually?

thanks!

 

[pagy]

I used to have that happen in SBS, ensure you are at the latest service pack levels.

Paul
MCSE


"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[ShackDaddy]

To speed up address provisioning, you can go into Recipients -> Recipient Update Services and right-click Recipient Update Service and choose "Update Now."

Dave Shackelford
MCSE, CCNA, Microsoft MVP: Exchange
Shackelford Consulting