Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SELF account

Status
Not open for further replies.

reallywildstuff

IS-IT--Management
May 31, 2005
12
US
very short version is that (for all users) the SELF account under AD U&C - Exchange Advanced - Mailbox Rights does NOT have "Associated External Account" checked, and further SELF is not listed at all under AD Security tab

i'm not sure how long this has been the case at this organization - but i know the change wasn't made intentionally, and that its resulted in problems like the one outlined here:


I placed check next to Associated External Account for Self under Mailbox Rights, didn't fix issue

Then I added Self account to Security tab and checked "Write Personal Info" as described on web and problem is now fixed for that user HOWEVER

My real question is how in the _hell_ did the SELF account get removed/modified like that?
 
I placed check next to Associated External Account for Self under Mailbox Rights, didn't fix issue"

Don't do that. This is only appropriate for disabled accounts.

If you don't see "SELF", do you see the actual account (security principle)? SELF is a sort of programatic shortcut that's used as a placeholder until the mailbox is logged on to by the user (which won't happen if the user is disabled ... ). The first time the user logs on, permissions are calculated and self is replaced by the store's copy of the mailbox security descriptor.



This is by design; it's supposed to happen. If it were not happening you would have a valid issue.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top