Exchange Server Forums

Restricting Domain Admins Accessing User Mailboxes

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Restricting Domain Admins Accessing User Mailboxes

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Restricting Domain Admins Accessing User Mailboxes - 9.Apr.2008 11:21:32 AM

scottmc9

Posts: 4
Joined: 28.Jan.2007
Status: offline

We need to remove the Domain Admins group from having permissions to access individual mailboxes. What is the best practice way of doing this? I tried going in to the mailbox store security properties, but no ability to change the setting was exposed because of inheriting permissions from above. I
navigated up the chain of objects within ESM but was unable to determine where to change the settings or how to perform this task without compromising some other functionality of Exchange.This is a legacy implementation which I inherited about a year ago and the previous admin did not leave config mgmt documentation.I recognize that this current configuration is not the default config.

Post #: 1

Featured Links*

RE: Restricting Domain Admins Accessing User Mailboxes - 18.Apr.2008 6:00:56 AM

choppol

Posts: 387
Joined: 9.Feb.2003
From: sydney
Status: offline

Is domain admin part of the exchange full administrators role in ESM?

(in reply to scottmc9)

Post #: 2

RE: Restricting Domain Admins Accessing User Mailboxes - 28.Apr.2008 9:15:01 AM

Sembee

Posts: 3577
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

The configuration you have is not standard, so something was changed.

This is the usual method to grant the permission: http://support.microsoft.com/kb/821897
Therefore follow that article but in reverse - undoing the changes that it has outlined.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to choppol)

Post #: 3