Announcement

Collapse
No announcement yet.

Security Permissions to Administer Mailboxes

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Security Permissions to Administer Mailboxes

    I have a question about article: http://www.petri.com/grant_full_mail..._2000_2003.htm

    What do you do when there are check boxes in the "deny" area. Mine for instance had two of them in the receive and send as area and gave me 404 errors in OWA.

  • #2
    Re: Security Permissions to Administer Mailboxes

    The Deny check box is the most powerful permissions:
    If you have marked the Send As + Receive As permissions in the allow fields but also in the Deny check boxes - you will not get access to the mailbox - as simple as that (like in NTFS permissions: Deny means no access, no matter what).

    * You should remove the Deny check boxes in order to get access.
    CNE 5, CCA, MCSE NT4.0-2003, MCSE 2003 messaging, Exchange Server MVP.
    Tzahi Kolber - IT Supervisor
    Polycom Israel.

    Comment


    • #3
      Re: Security Permissions to Administer Mailboxes

      Actually, Deny is powerful but not always THE MOST powerful. There are cases where ALLOW is more powerful.
      Cheers,

      Daniel Petri
      Microsoft Most Valuable Professional - Active Directory Directory Services
      MCSA/E, MCTS, MCITP, MCT

      Comment


      • #4
        Re: Security Permissions to Administer Mailboxes

        Well I've ran into a problem...

        OWA on an external connection; I can access my user's mailboxes.

        OWA and trying to open a mailbox in outlook 2003 inside my own network results in a 404 relatd thing

        The deny check boxes for send and receive as are checked and greyed out so I cannot uncheck it. I'm a little afraid of going into the advanced properties and playing around with the inheritable permissions.

        Comment


        • #5
          Re: Security Permissions to Administer Mailboxes

          If you the Exchange administrator and you NEED to get access to all mailboxes, remove the Deny check boxes.
          Check the next location:
          1. Organization level.
          2. Administrative Group Level.
          3. Server Level
          CNE 5, CCA, MCSE NT4.0-2003, MCSE 2003 messaging, Exchange Server MVP.
          Tzahi Kolber - IT Supervisor
          Polycom Israel.

          Comment


          • #6
            Re: Security Permissions to Administer Mailboxes

            That's the problem the checkboxes are GREYED OUT.

            Comment


            • #7
              Re: Security Permissions to Administer Mailboxes

              Then try to remove it from the highest location - in the Exchange Organization.
              CNE 5, CCA, MCSE NT4.0-2003, MCSE 2003 messaging, Exchange Server MVP.
              Tzahi Kolber - IT Supervisor
              Polycom Israel.

              Comment


              • #8
                Re: Security Permissions to Administer Mailboxes

                No security tab inside the ESM until you move down into the server. The only security related control the Exchange Organization in ESM is delegate control for assigning exadmins.

                Comment


                • #9
                  Re: Security Permissions to Administer Mailboxes

                  The security tab on the org is not enabled by default. You have to enable it.

                  In regedit, create a create a new Dword Value of "ShowSecurityPage" with a value of "1" in the following location:
                  Hkey_Current_User, Software, Microsoft, Exchange, ExAdmin

                  Simon.
                  --
                  Simon Butler
                  Exchange MVP

                  Blog: http://blog.sembee.co.uk/
                  More Exchange Content: http://exchange.sembee.info/
                  Exchange Resources List: http://exbpa.com/
                  In the UK? Hire me: http://www.sembee.co.uk/

                  Sembee is a registered trademark, used here with permission.

                  Comment


                  • #10
                    Re: Security Permissions to Administer Mailboxes

                    awsome; that worked; thanks guys!

                    Comment

                    Working...
                    X