RE: Domain admin mailbox rights on Exchange 2003

You must explicitly specify at the user level.

-----Original Message-----
From: Miha Pihler [mailto:Miha.Pihler@xxxxxx]
Sent: Tuesday, August 01, 2006 1:58 PM
To: Nick Vaernhoej; focus-ms@xxxxxxxxxxxxxxxxx
Subject: RE: Domain admin mailbox rights on Exchange 2003

Hi,

Default installation of Exchange will not allow administrators to access
other user's mailboxes. Domain admins would actually have to go either
to Active Directory Users and Computer and give themselves permissions
to another mailbox or if they have access to Exchange System Manager
(ESM) they could grant themselves permissions there.

Mike

-----Original Message-----
From: Nick Vaernhoej [mailto:nick.vaernhoej@xxxxxxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, August 01, 2006 4:53 PM
To: focus-ms@xxxxxxxxxxxxxxxxx
Subject: Domain admin mailbox rights on Exchange 2003

Hello all

Can I make sure that domain admins can't access certain people's
mailboxes on an Exchange 2003 server?
From a securityfocus article:
"Admin is DENIED access to mailboxes (by default), but is easily
changed"
On my home system by default I have access to any mailbox I want because
I am a domain admin so I am not sure what is meant by that statement
from securityfocus.

In AD with advanced view I can remove the domain admin under the persons
security tab. This seems to remove access to (Inbox) but not other
folders such as (Deleted Items). At the same time I lose access to
update their information. And I can just add Domain admins back in. I
have Kiwi alerting on changes made to access changes to exchange
mailboxes so being able to change permissions will be acceptable. By
default Domain Admins should not have the right though.

Any help will be greatly appreciated.

Thank you

Nick
"Quidquid latine dictum sit, altum sonatur."

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
---------------------------------------------------------------------------

Relevant Pages