permissions audit (fao sukh)
Sukh, or any other exchange experts...
As part of an exchange health check you recommended doing some checks on permissions and what has what permissions/access to what resources in exchange. Can you elaborate on any specific areas of concern and areas (perhaps with tools to assist) to check?
Thanks
May 14th, 2012 1:29pm
On Mon, 14 May 2012 17:22:38 +0000, cf090 wrote:
>As part of an exchange health check you recommended doing some checks on permissions and what has what permissions/access to what resources in exchange. Can you elaborate on any specific areas of concern and areas (perhaps with tools to assist) to check?
Mail enabled, or mailbox enabled, users with blocked inheritance.
Ditto for Organizational Units. Domains not properly prepared for
Exchange.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
May 14th, 2012 8:01pm
On Mon, 14 May 2012 17:22:38 +0000, cf090 wrote:
>As part of an exchange health check you recommended doing some checks on permissions and what has what permissions/access to what resources in exchange. Can you elaborate on any specific areas of concern and areas (perhaps with tools to assist) to check?
Mail enabled, or mailbox enabled, users with blocked inheritance.
Ditto for Organizational Units. Domains not properly prepared for
Exchange.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
May 14th, 2012 8:08pm
Cheers rich, as I am new to this can you elaborate on how to perform the specific checks, and any tools that can assist. Also the risk to the areas you listed. Do these cover mailbox permissions also, which is a big concern of ours? Thanks
Free Windows Admin Tool Kit Click here and download it now
May 15th, 2012 4:30am
On Tue, 15 May 2012 08:23:14 +0000, cf090 wrote:
>Cheers rich, as I am new to this can you elaborate on how to perform the specific checks, and any tools that can assist. Also the risk to the areas you listed. Do these cover mailbox permissions also, which is a big concern of ours? Thanks
I thought you were about ExBPA. Try the "Permission Check" option.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
May 15th, 2012 7:52pm