Exchange 5.5 Mailbox Security
I am running Exchange 5.5 on a Windows NT 4.0 platform.
The users are using Outlook(2000, 2003) clients their mail is delivered
to Personal Folders located their local machine. When any user selects
File, Open, Other Users Folder from the Menu they can view any other
users mailbox contents that reside on the server. I have no idea how long
this undesirable ability has been available because it was just brought to my attention.
I checked all the user and group permissions on Shares, File system, Security, Exchange
Container, etc and nothing sticks out. What I did find out is if I remove the user from
The group domain users they can no longer access any other users server side mail box.
When I re-checked the permissions, including Private Information Store, container there
was no listing for the group domain users. ?Help
System:
Exchange 5.5 Service Pack 4
NT 4.0 SR6
Mail Client Outlook 2000 and 2003 SR1
Software/Hardware used:
Software/Hardware used:
ASKED:
February 22, 2006 5:00 PM
UPDATED:
February 24, 2006 4:57 AM
Answer Wiki:
Hi,
The local pc folder where the pst file resides must have the group domainusers being able to access it.
Remove the group permisson on the location of the file.
To see all answers submitted to the Answer Wiki: View Answer History.
You said that they can view anything on the Server, not the workstations (where you probably have a PST installed – bad idea, BTW). Your permissions for mailboxes on the Exchange server is set inproperly. You need to go to each mailbox on the server and set it so that only the mailbox owner can view the contents. This article discusses setting the permissions in general. Essentially, you want to use the Setperm tool (free) to set the permissions back to their defaults for all of the mailboxes. If you have special requirements (like a manager can read their subordinates email box – or an administrative assistant can send on behalf of their boss) you can set them up with different permissions on an as needed basis. The later can be done using Exchange permissions manager, however, it is not a free tool. You’re better off doing it on your own since this shouldn’t be a frequent request.
Don
Incorrect permissions can be set in Exchange System Manager at the Organization level or server level or mailbox level. Check these levels for their security. The security page is not visible by default. You’ll have to add a registry key.