RE: Exchange Security

From: Cook, Steve (SJCook@APOGEEIDD.com)
Date: 02/21/02 

From: "Cook, Steve" <SJCook@APOGEEIDD.com>
To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Date: Thu, 21 Feb 2002 15:50:15 -0600

Take a look at who owns your groups. Owners can modify that information.

-----Original Message-----
From: Saad Yaseen [mailto:SYaseen@eandi.org]
Sent: Thursday, February 21, 2002 1:15 PM
To: 'Starks, Brad'; 'focus-ms@securityfocus.com'
Subject: RE: Exchange Security

If you can answer these questions that would help some of us to help you
out:

Whats the version of Exchange? 5.5 or 2000?
What Service Pack level do you have?
Whats the platform that you are running your exchnage server on? NT 4.0 or
2000?
At client level which software you are using? Like whats the version of
Outlook?
Have you applied all the required patches on Exchange, Platform and Client
Software?

Regards,
Saad

-----Original Message-----
From: Starks, Brad [mailto:BStarks@co.marin.ca.us]
Sent: Wednesday, February 20, 2002 6:47 PM
To: 'focus-ms@securityfocus.com'
Subject: Exchange Security

Hello everyone,

I'm semi-new to the list and semi-new to security. :)

I've got a question that hopefully someone can answer. The answer should
be easy, but nothing I try seems to work.

Here's the scenario:

I've got a global distribution list that I want to lock down. Right now,
anyone
on the distribution list can add/remove other members to/from it. This
recently became a problem when it was reduced from 2000 members to
400 because someone was doing something they shouldn't be.

Obviously, only those people that we designate should have this power.
I've added the permissions tab to the list through Exchange administrator,
and according to the permissions on the DL, no one other than those
listed should have any modification rights whatsoever to it. But, that
doesn't
work. I've even added the everyone group and removed all of their rights
except the ability to search, but they can still add and remove members
at will just by calling up the DL within their Outlook client.

So, is there another place to look to accomplish this task?

Thanks in advance,

Brad

Relevant Pages

  • RE: Exchange Security
    ... Subject: Exchange Security ... Whats the version of Exchange? ... on the distribution list can add/remove other members to/from it. ... at will just by calling up the DL within their Outlook client. ...
    (Focus-Microsoft)
  • RE: Exchange Security
    ... Whats the version of Exchange? ... Have you applied all the required patches on Exchange, Platform and Client ... on the distribution list can add/remove other members to/from it. ...
    (Focus-Microsoft)
  • =?Utf-8?Q?Re:_Verweis_auf_einen_alten_Exch?= =?Utf-8?Q?angeserver_kann_nicht_gel=C3=B6scht_w
    ... In der OU MS Exchange Security Groups ... Dies hab ich bei einem neu installiertem Exchange Server gepüft. ...
    (microsoft.public.de.exchange)
  • =?Utf-8?Q?Re:_Verweis_auf_einen_alten_Exch?= =?Utf-8?Q?angeserver_kann_nicht_gel=C3=B6scht_w
    ... unter erweiterer Ansicht wird keine OU MS Exchange Security Groups angezeigt. ... Dies hab ich bei einem neu installiertem Exchange Server gepüft. ...
    (microsoft.public.de.exchange)
  • Re: best way to recreate a mailbox
    ... >> some changes in PSS recently, so please take advantage of any request to ... I exhausted what I could do by phone and told the client, ... data loss can occur from running utilities against your Exchange ... >>> There is also a problem, likely related, with Backup Exec. ...
    (microsoft.public.windows.server.sbs)