Announcement

Collapse
No announcement yet.

Mailbox Sharing

Collapse
This topic is closed.
X
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Mailbox Sharing

    Hi All, new member so hello to everyone

    I am having an issue with a clients exchange server 2003.

    Basically all users are able to add anothers mailbox even though the default permissions is set to none, even if you add a specific user and set permissions to none the mail box can still be viewed by all.

    I am sure I'm missing something simple here ????

  • #2
    Re: Mailbox Sharing

    Permissions to view mailboxes can be granted in two ways.
    1. Through Outlook.
    2. Through the domain.

    If a user has been granted Full Mailbox Access then anything you do in Outlook isn't going to apply, because Full Mailbox trumps that.

    You need to look at the user permissions through ADUC and see whether Full Mailbox Access has been granted in some way that is being inherited. It could be that it has been granted to a group and everyone is a member of that group.

    You are looking for the permission Full Mailbox Access or the combination of Send As/Receive As. NOTHING else. The Exchange permission structure is very complex and people will see "Everyone" listed or other groups with Full Control and think that is what they need to remove.
    Furthermore, don't remove entire groups from the top box, deselect the permissions from the lower groups. If you aren't careful you can lock everyone out of Exchange.

    Finally, Exchange permissions are not live. They are cached for two hours. Therefore after making the change you may find that access continues. The cache can be flushed by restarting the Information Store service, but this will kick everyone out of Outlook.

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: Mailbox Sharing

      Thanks Simon

      Ive already fallen into removing the everyone permission, lost everyones mail, I tought forever but found a way to replace that permission so all was well

      Could you point me into the right direction line by line for this, I have looked in Exchange manager and cant seem to find what im looking for.

      Sorry to trouble you..

      Colin.

      Comment


      • #4
        Re: Mailbox Sharing

        if u go to a server with the exchange tabls in ADUC, then click view/advanced options, u get more tabs to look in, u can check the security permissions there.
        Please remember to award reputation points if you have received good advice.
        I do tend to think 'outside the box' so others may not always share the same views.

        MCITP -W7,
        MCSA+Messaging, CCENT, ICND2 slowly getting around to.

        Comment


        • #5
          Re: Mailbox Sharing

          Originally posted by uk_network View Post
          if u go to a server with the exchange tabls in ADUC, then click view/advanced options, u get more tabs to look in, u can check the security permissions there.
          Thanks so in a users properties

          is it in exchange advanced / mailbox rights ??

          I can see a security dialogue box with various entrys, but no reference to read write etc.

          Delegation has no one in the allow field.??

          Sorry if I seem stupid but exchange is not my field...

          Thanks for your help

          Comment


          • #6
            Re: Mailbox Sharing

            The only permission you are looking for is Full Mailbox Access. Nothing else.
            There are no "read only" permissions for mailboxes, it is Full Mailbox or nothing else.

            Although if you can't find your way around the AD permissions, I would probably suggest that you bring in a consultant to provide some training. Exchange permissions are very sensative and it is very easy to lock everyone out of their mailbox.

            Simon.
            --
            Simon Butler
            Exchange MVP

            Blog: http://blog.sembee.co.uk/
            More Exchange Content: http://exchange.sembee.info/
            Exchange Resources List: http://exbpa.com/
            In the UK? Hire me: http://www.sembee.co.uk/

            Sembee is a registered trademark, used here with permission.

            Comment


            • #7
              Re: Mailbox Sharing

              Hello Simon

              I appreciate your advice, I am a network engineer and full understand that the permissions are sensitive, if you read my post you would see that I fell into the remove everyone trap, however after locking everyone out of their mailboxes I found the way to restore it. This is about learning right??!

              So if you are able to help mr here can you please simply explain where to find the permissions you refer to??

              Thanks

              Comment


              • #8
                Re: Mailbox Sharing

                Have you actually tried looking for this information for yourself?
                You are using a product that is over eight years old, Amazon have 10 pages of books on the subject, Google over 2 million hits. This is basic stuff. Rather than wanting someone to hand feed you the information, try looking for it, as I can guarantee it has been written down elsewhere.

                http://www.google.co.uk/#hl=en&sourc...9a17d7b1de03ed

                And guess what the first hit is - THIS VERY SITE.

                Simon.
                --
                Simon Butler
                Exchange MVP

                Blog: http://blog.sembee.co.uk/
                More Exchange Content: http://exchange.sembee.info/
                Exchange Resources List: http://exbpa.com/
                In the UK? Hire me: http://www.sembee.co.uk/

                Sembee is a registered trademark, used here with permission.

                Comment


                • #9
                  Re: Mailbox Sharing

                  AH, I had forgotten what an insult us new members pose to obvious Exchange GODS like you I worship the ground you walk on and fully retract my request for help, I had forgotten that forums are for people to share experience and knowledge of their own free will.

                  Seriously you want to pull your head out of your ass, treat people with a little respect and humilty, you obvioulsy need some therapy to learn to control your patronising attitude. Forums dont become great when people like you are around, chill out and remember that if you dont like the requests people are making beacuse you feel thay are wasting your time, DONT REPLY ,,,,,SIMPLES..

                  Anyway, thanks for the link it is appreciated and may end up solving my issues.

                  Comment


                  • #10
                    Re: Mailbox Sharing

                    colinwebster,

                    Please understand that when someone, newbie or not, comes to a forum and asks a question, they have a minimum obligation, to themselves AND to the community they came to, to at lease ATTEMPT, to at least TRY to find an answer BEFORE posting.

                    Since your question does not deal with neither a new product, nor with an issue that was never heard of before (an exotic bug for example), your question may indicate that you never took these basic obligations. This, in many cases, may insult the existing and active forum members, because it shows them that instead of performing the basic and initial elementary steps to help yourself, you took the easy way and popped the question in hope that someone else will do the homework YOU were supposed to do.

                    Looking at the link Sembee gave you will immediately tell you that by performing this basic and elementary first step (of searching Google), you could have saved yourself the trouble, and learned something new. To make things worse, when you got the initial answer and a pointer to where to start looking, you never bothered to even TRY to find an answer yourself, but again, instead you came back and asked someone else to spoon-feed you. Did you also want us to chew the food for you as well?

                    Next time, hopefully, you'll know where to start, and if you did search (Google, the forum archives and elsewhere) and still didn't find anything useful, we will be more than happy to try to assist.

                    If you still think that our answers were rude, be my guest and leave the forums, clearly, they're not for higher beings like yourself.

                    Have a good day.
                    Cheers,

                    Daniel Petri
                    Microsoft Most Valuable Professional - Active Directory Directory Services
                    MCSA/E, MCTS, MCITP, MCT

                    Comment


                    • #11
                      Re: Mailbox Sharing

                      Fucking arrogant ass bye bye

                      Comment


                      • #12
                        Re: Mailbox Sharing

                        So much for professional behaviour.
                        Permanent ban... bye bye
                        Tom Jones
                        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                        PhD, MSc, FIAP, MIITT
                        IT Trainer / Consultant
                        Ossian Ltd
                        Scotland

                        ** Remember to give credit where credit is due and leave reputation points where appropriate **

                        Comment

                        Working...
                        X