RE: Exchange Security

From: Saad Yaseen (SYaseen@eandi.org)
Date: 02/21/02 

From: Saad Yaseen <SYaseen@eandi.org>
To: "'Starks, Brad'" <BStarks@co.marin.ca.us>, "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Date: Thu, 21 Feb 2002 14:14:42 -0500

If you can answer these questions that would help some of us to help you
out:

Whats the version of Exchange? 5.5 or 2000?
What Service Pack level do you have?
Whats the platform that you are running your exchnage server on? NT 4.0 or
2000?
At client level which software you are using? Like whats the version of
Outlook?
Have you applied all the required patches on Exchange, Platform and Client
Software?

Regards,
Saad

-----Original Message-----
From: Starks, Brad [mailto:BStarks@co.marin.ca.us]
Sent: Wednesday, February 20, 2002 6:47 PM
To: 'focus-ms@securityfocus.com'
Subject: Exchange Security

Hello everyone,

I'm semi-new to the list and semi-new to security. :)

I've got a question that hopefully someone can answer. The answer should
be easy, but nothing I try seems to work.

Here's the scenario:

I've got a global distribution list that I want to lock down. Right now,
anyone
on the distribution list can add/remove other members to/from it. This
recently became a problem when it was reduced from 2000 members to
400 because someone was doing something they shouldn't be.

Obviously, only those people that we designate should have this power.
I've added the permissions tab to the list through Exchange administrator,
and according to the permissions on the DL, no one other than those
listed should have any modification rights whatsoever to it. But, that
doesn't
work. I've even added the everyone group and removed all of their rights
except the ability to search, but they can still add and remove members
at will just by calling up the DL within their Outlook client.

So, is there another place to look to accomplish this task?

Thanks in advance,

Brad

Relevant Pages

  • Re: OT : Paging MS Exchange FOAK
    ... Done telnet SMTP sessions, Exchange accepts the email fine, and then ... feature so hackerz can't determine whats a valid email and whats not. ... Got diagnostic logging on maximum, nothing in there, tracing the ... Mail box size is well within its limits (and all its set to when they ...
    (uk.rec.motorcycles)
  • RE: Exchange Security
    ... Subject: Exchange Security ... Whats the version of Exchange? ... Have you applied all the required patches on Exchange, Platform and Client ... on the distribution list can add/remove other members to/from it. ...
    (Focus-Microsoft)
  • Re: FULL TILT player banned for poking fun at Mike Matusows avatar!
    ... you acted like a prick, trying to be *hilarious*, and got a ... >simple 2 week chat ban ... >whats the big deal? ... Indeed -- if this incident and exchange of e-mails even happened. ...
    (rec.gambling.poker)
  • Using .NET to Create an Offline Address Book
    ... Can anyone post a working example of creating an offline address book ... in Exchange using .NET (C#, ... whats going on if you post in VB). ... Prev by Date: ...
    (microsoft.public.exchange.development)
  • How to set exchange to accept mail from another server
    ... Does anyone have any clues to whats going on? ... I have IMAP enabled on Exchange as I can connect to the mailbox via the websever externally. ...
    (microsoft.public.exchange.setup)