I'm running Exchange 2003 Enterprise in Native mode. I have granted the Domain Admins and Enterprise Admins security group access to all the mailboxes (I know, I know, I know). Anyway, I want to exclude one particular user account that happens to be a member of the Domain Admins security group from having access to any mailbox other than their own. If I add them by exception and to the Exchange Org, what items do I need to deny them to that will still allow them access to their own mailbox?