Setting permissions on Outlook mailboxes

[Guest]

Hi,

We've recently upgraded from Outlook 2000 to Outlook 2003 and I've noticed
that the default permissions for the mailboxes are set to:
Name: Default, Permission Level: None.
I've also noticed that a couple of users have added other people's mailboxes
to their Outlook configuration with the above mentioned permissions
configuration.
How can I lock these down so that they cannot add other people's mailboxes
to their Outlook? I figured with that configuration, that they shouldn't be
able to do this.

thanks,

rhs

 

[Sue Mosher [MVP-Outlook]]

Sounds like you have other permissions, perhaps set on the parent OU or other container, that are granting broader permissions.

 

[Guest]

Thanks for your response Sue.

We are running mixed mode Windows 2000 AD with Exchange 5.5 on NT Server 4.0.
The Exchange Server is managed separately from AD. We are a small
organization (less than 25 users) and there are no additional
policies/permissions (other than the default) set on the OU's.

rhs

 

[Sue Mosher [MVP-Outlook]]

The other thing to look at, then, are the permissions granted by individual users on a folder-by-folder basis to the folders in their own mailbox.

What, by the way, are the permissions on the parent container for the mailboxes?

--
Sue Mosher, Outlook MVP
Author of
Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers

 

[Guest]

The permissions are set to Name: Default, Permission Level: None.
These are viewable and changeable through Outlook.

There are no containers in Exchange 5.5.
There are no permissions to be set at a higher level than the mailboxes
themselves in Exchange 5.5 Server, done through Outlook.

With Exchange Server 5.5 in a mixed mode with Active Directory, it is not
dependent on Active Directory, meaning that Exchange Server 5.5 can be
maintained on it's own without going through AD to make changes.
These permissions can be set through Outlook. I can mount anyones mailbox
here in the office and change their permissions. The problem is that it is
too liberal with the Default setting and I just need to know how to tighten
it down so that someone can't mount someone elses mailbox (as I've seen in
the event viewer on the Exchange Server 5.5 event logs). What would be the
appropriate setting (done through Outlook) to lock it down.

rhs

 

[Sue Mosher [MVP-Outlook]]

You still have containers without AD. Specifically, in the Exchange Administrator program, look under:

Organization
Site
Configuration
Servers
Specific Server Name
Server Recipients
-- here you should find all the mailboxes

Permissions on the Site container and the Server Recipients container will be inherited by all mailboxes.

Make sure you expose the Permissions tab by choosing Tools | Options from the Exchange Administrator program's menu. You will want to check what account(s) and/or groups have the User role over the containeres and mailboxes
--
Sue Mosher, Outlook MVP
Author of
Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers

 

[Guest]

Sue, there are no permissions set for any containers above the
mailboxes.....Organization level, Site Level, etc...

rhs

 

[Sue Mosher [MVP-Outlook]]

What do you see on the Permissions tab for a mailbox that has this problem, both under "Windows NT accounts with inherited permissions" and under "WIndows NT accounts with permissions."
--
Sue Mosher, Outlook MVP
Author of
Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers