Permission to Exchange
Hi All,
we got two sites with single domain, one site is running Exchange 2003 and other side is running Exchange 2007.
I try to enable the Full Permission for a user to a mailbox of 2003. I did , in the Exchange 2007 Management console, right click the mailbox of 2003, clicked the option - Manage Full Permission. I found "Everyone" group in the list.
Then I checked all the Exchange 2003 mailboxes in Exchange 2007 management console, EVERYONE group is there but not for Exchange 2007 mailboxes. Can anybody please explain how everyone group can be in the list?
March 1st, 2011 8:29pm
You shouldn't be modifying Exchange 2003 mailboxes with Exchange 2007 management tools, and vice versa. That can break the mailbox.
Therefore you should check whether the permission actually does apply through ADUC on the Exchange 2003 server. If it does, then it has probably been configured on the Exchange 2003 server, or on the databases.
DO NOT REMOVE EVERYONE.
Just to make that clear - if you just remove "Everyone" from the list of permissions, rather than deselecting the permission granted, then you will find you have broken Exchange in a major way. Everyone does have certain permissions to the AD object - Read
is one of them. This isn't Read permissions to the mailbox, but the object.
Thus find Everyone in the list and remove the permission from the bottom box, not "Everyone" from the top box.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
March 2nd, 2011 12:23pm
Awesome explanation, Thanks Simon.
March 3rd, 2011 4:32pm
Awesome explanation, Thanks Simon.
Indeed it was. And it made me laugh, remembering an admin long ago who decided that the Exchange server wasn't locked down correctly, and changed all
the permissions without telling anyone. Sorting that out sucked. Missy
Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2011 4:37pm