Mailbox Rights

[WCSO]

I've inherited an exchange server already setup before me. I've found that any user can open up any other users inbox by using outlook by going File-Open-Open User's Folder. I've found that this is not the default behavior of outlook but can't find exactly where to change this permission. When I look at the Mailbox Rights from the Exchange Advanced tab using AD, I find there is an everyone group with inherited permissions to read, change, take ownership and full mailbox access. Is this the problem? If so, where do I change it since it is inherited? Thanks

 

[MikeBatters]

In the Exchange System Manager right click the top of the tree in the left pane. Then select "Delegate Control" and follow the instructions.

You will see a list of delegated users that already have permissions.

Also right click on the Exchange server in the System Manager and have a look at the users/groups specified on the "Security" tab. You may also find the "Everyone" group has "Full Mailbox Access" granted.

Hope this helps - Post back if there are no clues from following the above.

Mike

*************************************

Remember - There is always another way..........I just haven't found out what it is yet!

 

[WCSO]

I looked at the delegation and only the administrator is listed. At the server security, I found the everyone group was there but none of the permissions were selected. Still clueless. Thanks

 

[MikeBatters]

The Rights can also be set at the individual Mailbox store level within the storage group.

Have you check there?

Mike

*************************************

Remember - There is always another way..........I just haven't found out what it is yet!

 

[WCSO]

At the store level, the everyone group has full control. That would seem to be my problem. But what should be there for users and groups? Thanks

 

[MikeBatters]

Every user gets Full Mailbox access to their own mailbox anyway.

The "everyone" group should only be inheriting "create named properties in the information store" from a higher level and should have no other permissions at all.

Hope that helps in the quest to secure your mail system

Mike

*************************************

Remember - There is always another way..........I just haven't found out what it is yet!