I don't believe the everyone group needs send as and receive as rights on the information store object, someone has been changing things... Perhaps the reason someone set those permissions is listed in your change log. On my mailbox store, the everyone group has inherited "Create named properties.." and nothing else.
> -----Original Message----- > From: Pillai, Raj [mailto:[EMAIL PROTECTED]] > Sent: Thursday, August 29, 2002 12:28 PM > To: Exchange Discussions > Subject: RE: Users have unlimited permissions(was: Never seen > this....) > > > Thanks for all your replies..Ed..Jennifer... > Ok, if some one can throw some light on what is wrong with > this picture, I will really appreciate that. Here is how the > permissions are assigned on each of these components: > ************************************************************** > ************** > **************** > Exchange Server 2000 Enterprise, Sp3 > > C:--O/S---------Everyone (Full Control)? > > D:---Exchange---- Everyone (Full Control)? > > E:--------mdb Database----Everyone (Full Control)? > > ADUC: "Everyone" has full access in any users "Mailbox Rights" > "Authenticated users" has full access in any users > "Mailbox Rights" > "Domain Users" has full access in any users "Mailbox Rights" > (Where is this getting inherited from? I cannot remove > these permissions at this level) > > ESM(Server level): "Authenticated > users"--READ,WRITE,EXECUTE,READ > PERMISSIONS,LIST CONTENTS,READ PROPERTIES, WRITE > PROPERTIES. > "Domain Users"--All permissions except Full > "Everyone"--READ,WRITE,EXECUTE,READ > PERMISSIONS,LIST > CONTENTS,READ > PROPERTIES, WRITE PROPERTIEs > > ESM(Mailbox Store level): "Everyone Group"--Read,Execute, Read > permissions, List contents, Read Properties, write properties,list > object,Recieve as, send as. > > "Domain Users"--All permissions except Full > > "Authenticated users"--- same as everyone group. > > ************************************************************** > ************** > ************* > TIA > > Raj > > > > > -----Original Message----- > From: Ed Crowley [mailto:[EMAIL PROTECTED]] > Sent: Friday, August 23, 2002 8:34 PM > To: Exchange Discussions > Subject: RE: Users have unlimited permissions(was: Never seen > this....) > > > What you're seeing could only have happened by someone > futzing with the permissions. > > Ed Crowley MCSE+Internet MVP kcCC+I > Tech Consultant > hp Services > Protecting the world from PSTs and Bricked Backups! > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Pillai, Raj > Sent: Friday, August 23, 2002 2:16 PM > To: Exchange Discussions > Subject: Users have unlimited permissions(was: Never seen this....) > > > I think I have a similar issue here, except it is Exchange > 2000 sp3 . I can see that a delegateA with minimum permission > has unlimited access to userA's mailbox. In AD users and > computers,when I look at the mailbox rights of userA the > "everyone" group has full access, I don't know how this > happened, it states that it is inherited from the parent > container. UserA is sitting inside this > hierarchy: > AD Users and Computers---- > ------Dancona.com > ----All Dancona users > ----Attorneys > In the parent containers Everyone does not have full control > rights. However in ESM if I look at properties of Mailbox > store in the security tab the everyone group has all kinds of > rights except Full control. Is the Full access for everyone > group being inherited from here. Can some one advice how > much permission "everyone" group should have. > > TIA. > Raj > > BTW: I just learned the hard way that Standard version of > exchange does not support >16GB on the Information store.Had > to do an emergency upgrade to the enterprise edition of > exchange. Just an FYI. > > > -----Original Message----- > From: Harris, Dot [mailto:[EMAIL PROTECTED]] > Sent: Friday, August 23, 2002 2:11 PM > To: Exchange Discussions > Subject: RE: I've never seen this > > > Understood, that is the way it is suppose to work. It wasn't > working that way. A user simply went through the steps, > added another mailbox and didn't have to setup delegate > access and we didn't even have to give them > permissions to the mailbox. > > > -----Original Message----- > > From: Andrey Fyodorov [SMTP:[EMAIL PROTECTED]] > > Sent: Friday, August 23, 2002 2:02 PM > > To: Exchange Discussions > > Subject: RE: I've never seen this > > > > Tools-Services-Advanced allows to connect to another mailbox, but > > first you have to be given permissions to that mailbox. That is > > normally done in the Exchange Admin program (mailbox > > Properties-Security-Add-set up additional NT account as a User) and > > that normally gives full mailbox access. > > > > -----Original Message----- > > From: Harris, Dot [mailto:[EMAIL PROTECTED]] > > Sent: Friday, August 23, 2002 1:12 PM > > To: Exchange Discussions > > Subject: RE: I've never seen this > > > > > > AWESOME! > > > > Thank you. > > > > Dot > > > > > -----Original Message----- > > > From: Tim Ault [SMTP:[EMAIL PROTECTED]] > > > Sent: Friday, August 23, 2002 12:01 PM > > > To: Exchange Discussions > > > Subject: RE: I've never seen this > > > > > > Q183674: "How to Find What User Is Deleting or Editing Objects in > > > Administrator" > > > > > > -----Original Message----- > > > From: Harris, Dot [mailto:[EMAIL PROTECTED]] > > > Sent: Friday, August 23, 2002 11:53 AM > > > To: Exchange Discussions > > > Subject: RE: I've never seen this > > > > > > > > > From within Outlook. Tools, Services, MS Exchange Server, > > > Properties, Advanced Tab. > > > > > > We've narrowed down the cause of the problem. It looks as though > > someone > > > at > > > our remote site determined that \Everyone needed > Permissions Admin. > > > permissions to the DS Site Configuration. Or course, no one will > > > fess > > up. > > > > > > > -----Original Message----- > > > > From: Andrey Fyodorov [SMTP:[EMAIL PROTECTED]] > > > > Sent: Friday, August 23, 2002 10:48 AM > > > > To: Exchange Discussions > > > > Subject: RE: I've never seen this > > > > > > > > And how do the admins give the permissions for one user > to access > > > > another user's mailbox? > > > > > > > > -----Original Message----- > > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > > > > Sent: Thursday, August 22, 2002 4:22 PM > > > > To: Exchange Discussions > > > > Subject: I've never seen this > > > > > > > > > > > > We have Exchange 5.5 - sp4 running on Windows 2000 Advanced > > > > server, > > > > sp2. In the last two weeks, whenever one of the admins > attempts to > > > > > give a user access to another users Outlook mailbox, we > find that > the > > > > user has unlimited > > > > access to that user's mailbox and none of the > permissions/restrictions > > > > apply. It is if the delegating user is now the owner of the > mailbox. > > > > > > > > > > Any thoughts on how to resolve this? > > > > > > > > Dot > > > > > > > > > _________________________________________________________________ > > > > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > > > > Archives: > http://www.swynk.com/sitesearch/search.asp > > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > _________________________________________________________________ > > > > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > > > > Archives: > http://www.swynk.com/sitesearch/search.asp > > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > > Archives: http://www.swynk.com/sitesearch/search.asp > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > > Archives: http://www.swynk.com/sitesearch/search.asp > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > ************************************************************** > ********** > **** > **This e-mail message, including any attachments, contains > information that is confidential, may be protected by the > attorney/client or other applicable privileges, and may > constitute non-public information. This message is intended > to be conveyed only to the designated recipient(s). If you > are not the intended recipient of this message, do not read > it; please immediately notify the sender that you have > received this message in error and delete this message. > Unauthorized use, disclosure, dissemination, distribution or > reproduction of this message or the information contained in > this message or the taking of any action in reliance on it is > strictly prohibited and may be unlawful. Thank you for your > cooperation.************************************************** > ********** > **** > ************** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > ************************************************************** > ************** > **This e-mail message, including any attachments, contains > information that is confidential, may be protected by the > attorney/client or other applicable privileges, and may > constitute non-public information. This message is intended > to be conveyed only to the designated recipient(s). If you > are not the intended recipient of this message, do not read > it; please immediately notify the sender that you have > received this message in error and delete this message. > Unauthorized use, disclosure, dissemination, distribution or > reproduction of this message or the information contained in > this message or the taking of any action in reliance on it is > strictly prohibited and may be unlawful. Thank you for your > cooperation.************************************************** > ************** > ************** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
