Exchange Server Forums

Giving 'Read' Permission on entire organization

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Giving 'Read' Permission on entire organization

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Giving 'Read' Permission on entire organization - 4.Apr.2008 3:43:17 PM

mattboy_slim

Posts: 24
Joined: 13.Feb.2003
From: NW Iowa
Status: offline

We have a group of "Power Users" who we would like to give access to open any other user's mailbox through Outlook. Other than doing this manually for each person, I cannot find a way to accomplish the task. I need to grant the "Reviewer" permission so to speak for this security group against the entire organization. If this is possible, please let me know.

Thanks,
Matt

Post #: 1

Featured Links*

RE: Giving 'Read' Permission on entire organization - 23.Jul.2008 11:13:25 AM

mb2k01

Posts: 13
Joined: 23.Jul.2008
Status: offline

Hi Matt,

I'm new to the forum, but happy to help if you still need it (as your message was posted in April you have probably already figured out how to do it!)

To allow the users permission to open other users mailboxes you would need to do the following:

Open AD Users and Computers (On an Exchange Server)
Select a the user who's mailbox you want the group to have access to
Right-click and open Properties. Choose the Exchange Advanced tab
Click Mailbox Rights
Add the group you have created to the list and give them the appropriate permission settings (Associated external account wouldn't normally be given, but the others you can pick / choose as you wish)

Those steps should enable a user who is part of the group to browse to that mailbox (e.g in Outlook go to File > Open > Other users folder..)

If you want to do this to a lot of users all at the same time rather than selecting them individually you can't (at least not in Server 2000 or 2003).
Search the internet for a freeware utility called ADModify - this is a MUST HAVE utility for any administratior who works with Active Directory! You will be able to make the above change to a large selection of people.

On a totally non-technical point, make sure that the users within your orginisation are aware their mailboxes are monitored. You could easily run in to legal difficulty if a user questions this practice and feels their privacy is being invaded. The practice would ideally be listed in an acceptable use policy for your orginistations that your employees must sign / agree to.

Cheers

Mark

_____________________________

Mark Braham
ICT Network Manager / Cluster Support Manager
Brannel School

(in reply to mattboy_slim)

Post #: 2

RE: Giving 'Read' Permission on entire organization - 25.Jul.2008 6:53:40 AM

Sembee

Posts: 3604
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

There is no read only setting for mailboxes that you can set a global level. The "Read" permission that you can see on mailboxes is the ability to read the OJBECT, not the content.

The closest you can get is Full Mailbox access, but that will give those users Full Control over the mailbox.

The only way to grant read access is to set it on the Mailbox itself through Outlook. You can set it at the top of the tree and filter it down. However as it is a client side setting there is nothing that you can do to stop the users from removing that permission.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to mb2k01)

Post #: 3