You must explicitly specify at the user level. -----Original Message----- From: Miha Pihler [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 01, 2006 1:58 PM To: Nick Vaernhoej; [email protected] Subject: RE: Domain admin mailbox rights on Exchange 2003
Hi, Default installation of Exchange will not allow administrators to access other user's mailboxes. Domain admins would actually have to go either to Active Directory Users and Computer and give themselves permissions to another mailbox or if they have access to Exchange System Manager (ESM) they could grant themselves permissions there. Mike -----Original Message----- From: Nick Vaernhoej [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 01, 2006 4:53 PM To: [email protected] Subject: Domain admin mailbox rights on Exchange 2003 Hello all Can I make sure that domain admins can't access certain people's mailboxes on an Exchange 2003 server? >From a securityfocus article: "Admin is DENIED access to mailboxes (by default), but is easily changed" On my home system by default I have access to any mailbox I want because I am a domain admin so I am not sure what is meant by that statement from securityfocus. In AD with advanced view I can remove the domain admin under the persons security tab. This seems to remove access to (Inbox) but not other folders such as (Deleted Items). At the same time I lose access to update their information. And I can just add Domain admins back in. I have Kiwi alerting on changes made to access changes to exchange mailboxes so being able to change permissions will be acceptable. By default Domain Admins should not have the right though. Any help will be greatly appreciated. Thank you Nick "Quidquid latine dictum sit, altum sonatur." ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- --------------------------------------------------------------------------- ---------------------------------------------------------------------------
