Inherited "Full Access" and "Send as" Permissions on new accounts - where is this being set from?
Hello
For newly created accounts there are a list of mailboxes that have "Full access" and "Send as" permissions automatically set. Some of these are correct but I have some legacy accounts in the list that I want to remove.
Currently I remove these right after the account is set-up but would like to find the source of the inherited "Full Access" Permissions and "Send as" and remove from there so they do not apply to newly created mailboxes.
Seems like a simple thing but I just cannot figure out where these permissions are inheriting from.
Thanks!
October 26th, 2012 7:17am
Sometimes the easiest thing is to open up adsiedit, drill down to the mailbox store level under the Configuration Container, check the permissions and walk up the tree to the ORG level object until you find where they are set.
Free Windows Admin Tool Kit Click here and download it now
October 26th, 2012 7:21am
Andy - you rock! That was it. The account had full control set at:
ADSI Edit/Configuration/CN=Configuration/CN= Services/CN=Microsoft Exchange.
I removed and it is no longer applying to new mailboxes.
Thanks so much!
October 26th, 2012 8:12am