16,755 pts.
 Exchange 2007 blocking admins
In Exchange 2007, how do I block other Admins from viewing my outlook mailbox?

Software/Hardware used:
exchange 2007
ASKED: February 2, 2010  5:54 PM
UPDATED: February 4, 2010  4:23 PM

Answer Wiki:
Technically you can't. If someone is an Exchange Admin they can grant themselves rights to view any mailbox via Outlook. It is your admins professionalism which keeps them from doing this. If however you have reason to think that someone is looking at your email, bring this up with your management. ******** MrDenny is right. Exchange Admins require "god rights" on all mailboxes in order to troubleshoot issues in the event a user is unavailable or is having a problem getting into their mail. I cannot tell you how many times being able to view and work with a mailbox before calling a customer has saved an incredible amount of time. The end user is often away when I get the trouble ticket and that way I do not have to wait on them to be able to start figuring out the problem. But as mentioned this of course requires the admins are being ethical. Be aware that all your email belongs to your company, not you. Admins can be required by management or HR to view your mail without your permission or your knowledge.
Last Wiki Answer Submitted:  February 4, 2010  4:23 pm  by  Denny Cherry   64,550 pts.
All Answer Wiki Contributors:  Denny Cherry   64,550 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

You can use Quest Intrust for exchange to perform security logging about who is getting into who’s mailbox and seeing what emails. Works great but it is an extra cost.

 70 pts.

 

Would it be possible to create a PST on a thumb drive or password protect the current PST on the computer? If so, could not the admin who did not want their email read delete their traffic on the exchange?

Seems like a lot of work.

 2,325 pts.

 

XENOPHON, if you export all your mail to a PST and password protect it, then noone else can read it. The Exchange admin will only be able to view the email that is on the exchange server. Not all companies allow export to PSTs however. It is possible to block that option with a GPO. If the exchange account is PST by a POP3 account only then noone will be able to read the mail unless logged in as the user on the pc. MAPI accounts are readable by any Exchange Admin.

 56,975 pts.