Daniel makes a great point. Cover your butt. This one can turn nasty very fast.
Regards, Hank Arnold My Blog: <http://it.toolbox.com/blogs/personal-pc-assistant/> http://it.toolbox.com/blogs/personal-pc-assistant/ Twitter: @Hank_PCDoc Facebook: <https://www.facebook.com/hank.arnold.96> https://www.facebook.com/hank.arnold.96 From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Wolf Sent: Wednesday, June 18, 2014 3:16 PM To: [email protected] Subject: RE: [NTSysADM] email access only - urgent Yep. Make sure you cover your butt and put it IN WRITING that this is not something that complies with industry practices and poses a risk to the business. This is a ridiculously stupid request and it will stain anyone who touches it. You know this, but I'm looking out for you here. Look out for yourself. Daniel Wolf From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of Michael B. Smith Sent: Wednesday, June 18, 2014 1:41 PM To: [email protected] <mailto:[email protected]> Subject: RE: [NTSysADM] email access only - urgent This is a really bad idea. If I were an auditor, I would show a "significant finding" if I found out about this. Anyone who has authentication access to AD has the potential for copying the entire AD. Export the mailbox to PST and be done with it. From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of J- P Sent: Wednesday, June 18, 2014 11:35 AM To: [email protected] <mailto:[email protected]> Subject: [NTSysADM] email access only - urgent Hi all Got a strange request , a user will be leaving the company and they want him to ONLY have access to his exchange account, so no RDP, TS, desktop logons etc.. If this is possible, what is the EASIEST way to go about it?
