|
|
|
date: Tue, 23 May 2006 10:20:30 -0400,
group: microsoft.public.exchange2000.admin
back
Re: exchange message tracking logs question
"Lanwench [MVP - Exchange]"
wrote in message
news:urJPeaofGHA.4172@TK2MSFTNGP04.phx.gbl...
>
>
> In news:OesMBPnfGHA.2188@TK2MSFTNGP04.phx.gbl,
> Gary Massengale typed:
>> the server log found in C:\Program Files\Exchsrvr\MYSERVERNAME.log
>> has read permissions for all users.
>>
>> Is it necessary for all users to have read access to this folder?
>>
>> would there be any problem in my removing read access to all users?
>>
>> currently the administrator has full, but ANYONE has read only access.
>>
>> gary
>
> Larger question: who, outside of the adminstrator(s), could even be
> accessing the server console, or the default/admin share across the
> network? The answer should be, nobody....if that's not the case, then you
> need to worry about this, and many much larger issues.
>
>
maybe its not as bad as all that..
I did notice one of my assistants had it pulled up. I have him setup so
that he has some admin rights, he is able to unlock accounts but not change
passwords (something I learned from this newsgroup I think).
so that may be why he is able to view it. tried it from a normal user and
they could not.
gary
date: Tue, 23 May 2006 13:17:01 -0400
author: Gary Massengale
|
|
