Default Mailbox Permissions in Exchange 2003   

Ive had Exchange 2003 up and running for a year without problems.

Ive just tried setting up two new users as a test.

Logged on as User A, In Outlook 2007  I was able to do File, Open other 
users folder, and see User B's inbox. User B has not set User A as a 
delegate, in fact User B has not had any settings changed.

This I do not want.

I have gone to Active Directory Users, clicked on User B, chosen Properties, 
Exchange Advanced, Mailbox Rights, and I can see a tick in a grey box next to 
Everyone Read Access allow. 

I cant untick this as it says its inheriting the permission from the parent 
folder. However where is the parent folder?

What I want to acheive is no user can open another users folder unless the 
other user gives them access or an admin takes control.

Ive tried reading documentation but it doesnt seem to cover this.

Thanks in advance

Rob

date: Thu, 15 May 2008 04:57:01 -0700   author:   Rob Smith

RE: Default Mailbox Permissions in Exchange 2003   

OK Ive worked this out. It wasnt Everyone Read Access - it was Everyone Read 
Permissions - thats quite normal. The thing that was allowing User A to open 
User B s mail was Authenticated Users having Full Control. I removed 
Authenticated Users at the Mailstore level and all was as I wanted it to ber.

Rob

"Rob Smith" wrote:

> Ive had Exchange 2003 up and running for a year without problems.
> 
> Ive just tried setting up two new users as a test.
> 
> Logged on as User A, In Outlook 2007  I was able to do File, Open other 
> users folder, and see User B's inbox. User B has not set User A as a 
> delegate, in fact User B has not had any settings changed.
> 
> This I do not want.
> 
> I have gone to Active Directory Users, clicked on User B, chosen Properties, 
> Exchange Advanced, Mailbox Rights, and I can see a tick in a grey box next to 
> Everyone Read Access allow. 
> 
> I cant untick this as it says its inheriting the permission from the parent 
> folder. However where is the parent folder?
> 
> What I want to acheive is no user can open another users folder unless the 
> other user gives them access or an admin takes control.
> 
> Ive tried reading documentation but it doesnt seem to cover this.
> 
> Thanks in advance
> 
> Rob

date: Thu, 15 May 2008 07:43:04 -0700   author:   Rob Smith