RE: [ActiveDir] GPO and the Outlook Dumpster

Thu, 15 Jan 2004 08:35:50 -0800

Title: Message
That's OK Roger.  We just need to tell Microsoft to rewrite that KB below else I need to drink more coffee to understand it properly. ;)
-----Original Message-----
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 10:03 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

Hate to say it, but you're wrong on that one Al. The client side registry key simply changes whether or not the client is aware of the "dumpster" in a particular mailbox folder.
 
Remember, the "dumpster" is really nothing more than a view on a database table in which the items are all marked as tombstoned. What you see in the folder in Outlook (or any other client) is simply the list of items in the folder which are not tombstoned.
 
Roger
--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
-----Original Message-----
From: Mulnick, Al [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 9:38 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

No, dumpsteralwayson is used to set the mail properties for the mail folders other than deleted items and to allow for hard deletes to be recovered.  Basically, it means that all items must be sent to deleted items retention if they existed in a protected folder.
 
 
 
It's not quite that clear though is it?  People who have older clients aren't subject to this "feature" at all and only the items that were sent to the Deleted Items folder will have deleted items retention.  Basically. 
 
 
-----Original Message-----
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 7:46 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

There are a lot of default settings that most admins change - and deleted item retension is one of them (at least I would hope it is).
 
The DumpsterAlwaysOn setting is client side, and only affects whether or not you can see the dumptser. It most certainly exists on every folder in Exchange (when DIR is enabled). The offender does NOT need to have this registry key set for a Shift-Delete email to be recovered. Fairly simple to prove to yourself, but I know I'm one of three people in the company with it enabled, and I use it to get our exec admin's out of trouble quite a bit....
 
Roger
--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
-----Original Message-----
From: deji Agba [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 2:18 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

I usually refrain from adding to a thread more than once, except to occasionally concur. I have always thought that, all things being equal, Shift-Delete is indeed a permanent delete, given the following circumstances:
 
>> Assuming you DON'T have deleted item retention enabled - which is the default configuration
>> You have not enabled DumpsterAlwaysOn -which is the default configuration
>>You don't do brick-level backup, you don't have an offline Exchange server you test restore to, AND you are not willing to interrupt other users' access to do a live restore
 
I've been known to be wrong before, but I don't think this is one of those moments :-p
 
Sincerely,

Dèjì Akómöláfé, MCSE MCSA MCP+I
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon

From: Roger Seielstad
Sent: Wed 1/14/2004 4:58 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

But Shift-Delete is not a permanent delete. Assuming you have deleted item retension enabled, shift-delete simply marks the message for deletion, but it is still available within that folder's dumpster until the DIR time expires, and is accessible using the DumpsterAlwaysOn registry setting for Outlook.
 
Scared the crap out of my desktop guy who thought he could hide email...
 
Roger
--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
-----Original Message-----
From: deji Agba [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 14, 2004 1:40 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

your protection against this "CYA" type of deletion is backup. If you maintain a diligent backup of your Exchange Server, you can always do a restore to your offline server whenever you need to "prove" something. Disabling access to the "Recover Deleted Items" folder will not buy you much with a determined user who wants to cover his/her track. Shift-Del will not send deleted items to that folder, you know?
 
 
Sincerely,

Dèjì Akómöláfé, MCSE MCSA MCP+I
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon

From: Oliver Marshall
Sent: Tue 1/13/2004 12:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

Because while the Recover Deleted Items addin allows you...err...recover
deleted items a user can also delete things permanently. We have had
people 'covering their tracks' by deleting emails.

I don't want to disable the feature all together as it's a useful IT
tool for managers etc, but not for users.

Olly 

-----Original Message-----
From: David, Andy [mailto:[EMAIL PROTECTED] 
Sent: 13 January 2004 19:15
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

I'm just wondering why you would want to implement such a thing. 
 

-----Original Message-----
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 13, 2004 12:27 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

It strikes me that it might be part of the Office Administration
Templates, which can be distributed via GPOs, but aren't actually part
of the GPO settings.

http://www.microsoft.com/office/ork/2003/five/ch18/MntA04.htm

There are similar templates for Office XP and Office 2000 that might do
the trick.

Roger
--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.


> -----Original Message-----
> From: Oliver Marshall [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, January 13, 2004 11:19 AM
> To: [EMAIL PROTECTED]
> Subject: [ActiveDir] GPO and the Outlook Dumpster
> 
> 
> Does anyone know a GPO setting that will allow me to prevent users 
> from accessing the Recover Deleted Items addin in Outlook ? Someone on

> an exchange mailing list said that there is a GP setting to prevent 
> this addin being loaded.
> 
> Olly
> List info   : http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: 
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to