Amending default Exchange 2003 MDBData folder security

Home Forums Messaging Software Exchange 2000 / 2003 Amending default Exchange 2003 MDBData folder security

This topic contains 1 reply, has 2 voices, and was last updated by Avatar Sembee 8 years, 1 month ago.

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #154196

    I am looking for advice as to whether the defualt security can be changed on the MDBdata exchange folder without issues.

    This is an Exchange 2003 Enterprise and Windows 2003 Standard server environment.

    Specifically. I want Domain Administrators to have full control and remove the default Administrators from the folder.

    The reason for this is that we have a requirement to allow the local administrators of this specific network to continue to manage the network except for certain secure areas.

    I have set up a second Private Mailbox store in a new SMTMDBdata folder. I want to ensure that administrators cannot access the databases in this folder and then mount these and view the data.

    We have already ensured that only one account is listed in the Domain Administrator group as a God account if you like.

    Any advice appreciated

    Avatar
    Sembee
    Member
    #260176

    Re: Amending default Exchange 2003 MDBData folder security

    Changing the permissions on the database isn’t going to keep administrators out of the data. There are so many other ways to get access.

    Bottom line with Exchange permissions is simple – don’t touch. Add, but don’t remove. This isn’t even something I would consider.

    Simon.

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.