Hi,As new CIO to my company I have detected my domain administrators have read permissions on the exchange mailbox of both our CEO and CFO, and not for other users (very suspicious).Apart from the obvious (deny read permissions to the administrators for this mailboxes), what other measures can I take to prevent administrators from reading mail in this mailboxes (or any other mailbox)?As you may well understand, this is not an issue I can ask my administrators to solve... and I don't have Exchange administration experience to solve this myself.Thanks in advance,Javier

The permission is probably there for tools like exmerge...its pretty standard practice for exchange admins to give themselves the rights. A domain admin will always be able to over-ride any permissions you set, so your best bet is to make them non-domain admins and delegate the control (delegation of control wizard) that they will need to get their jobs done.