Exchange Server Forums
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
User can see all users free/busy details
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
 Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
|
|
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
|
User can see all users free/busy details - 25.Jul.2008 10:45:28 AM
|
|
|
dwynne
Posts: 54
Joined: 10.Apr.2008
Status: offline
|
I have an admin that I just moved to Exchange 2007. We noticed that they can see everyone's free busy full details. On the Exchange 2003 server system manager, top level of trhe org, properties, security tab, that user is there with full control. When I uncheck allow inherit permissions and remove the user things work. If I recheck the allow inheritable box the user is added back in when replciation occurs. I can't see any obvious places where this user is getting the permissions from, they aren't in any groups that would allow it. Anyone know a way to determine what is propagating to the user so I can stop it.
|
|
|
|
|
RE: User can see all users free/busy details - 25.Jul.2008 11:15:26 AM
|
|
|
mark@mvps.org
Posts: 3958
Joined: 9.Jun.2004
From: Philadelphia PA
Status: online
|
Someone's been very naughty with the Exchange. By default the Security tab on the ORG level isn't visible so someone has dived into the registry to enable it. Secondly no users individual names are supposed to be up at that level.
Go and look at the properties of all the Exchange Security Groups that got created and see what's afoot there. I bet you'll see names in there that you don't like the lok of.
In case you didn't already guess, you've got something shady going on.
_____________________________
Mark Arnold (Exchange MVP)
List Moderator
|
|
|
|
|
RE: User can see all users free/busy details - 25.Jul.2008 11:47:39 AM
|
|
|
dwynne
Posts: 54
Joined: 10.Apr.2008
Status: offline
|
I'm not concerned about the security tab being exposed as I did that myself. And I am not concerned with the user either, this was done by mistake at some point I believe. I have looked at all the security groups and don't see anything glaring.
|
|
|
|
|
RE: User can see all users free/busy details - 25.Jul.2008 11:56:19 AM
|
|
|
mark@mvps.org
Posts: 3958
Joined: 9.Jun.2004
From: Philadelphia PA
Status: online
|
1. Exactly what groups does this user belong to in AD?
2. If you look on someone else's AD account what rights does the admin have over them?
_____________________________
Mark Arnold (Exchange MVP)
List Moderator
|
|
|
|
|
RE: User can see all users free/busy details - 25.Jul.2008 12:03:02 PM
|
|
|
dwynne
Posts: 54
Joined: 10.Apr.2008
Status: offline
|
In comparing my security and dl group memberships to this user they are identical except for some dist lists I am on and they are not. That is why it is perplexing. I also checked that the user was not a local admin on the exchange server.
|
|
|
|
|
RE: User can see all users free/busy details - 6.Aug.2008 9:59:45 AM
|
|
|
dwynne
Posts: 54
Joined: 10.Apr.2008
Status: offline
|
Hopefully this will help someone out someday but I did find out where the permissions were coming from. On the domain controller, under sites and services, services, right click ms exchange, properties, security, removed the user from this tab.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
