Exchange 5.5 Mailbox Security

Exchange security
Microsoft Exchange
I am running Exchange 5.5 on a Windows NT 4.0 platform. The users are using Outlook(2000, 2003) clients their mail is delivered to Personal Folders located their local machine. When any user selects File, Open, Other Users Folder from the Menu they can view any other users mailbox contents that reside on the server. I have no idea how long this undesirable ability has been available because it was just brought to my attention. I checked all the user and group permissions on Shares, File system, Security, Exchange Container, etc and nothing sticks out. What I did find out is if I remove the user from The group domain users they can no longer access any other users server side mail box. When I re-checked the permissions, including Private Information Store, container there was no listing for the group domain users. ?Help System: Exchange 5.5 Service Pack 4 NT 4.0 SR6 Mail Client Outlook 2000 and 2003 SR1

Answer Wiki

Thanks. We'll let you know when a new response is added.

The local pc folder where the pst file resides must have the group domainusers being able to access it.
Remove the group permisson on the location of the file.

Discuss This Question: 2  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Swiftd
    You said that they can view anything on the Server, not the workstations (where you probably have a PST installed - bad idea, BTW). Your permissions for mailboxes on the Exchange server is set inproperly. You need to go to each mailbox on the server and set it so that only the mailbox owner can view the contents. This article discusses setting the permissions in general. Essentially, you want to use the Setperm tool (free) to set the permissions back to their defaults for all of the mailboxes. If you have special requirements (like a manager can read their subordinates email box - or an administrative assistant can send on behalf of their boss) you can set them up with different permissions on an as needed basis. The later can be done using Exchange permissions manager, however, it is not a free tool. You're better off doing it on your own since this shouldn't be a frequent request. Don
    0 pointsBadges:
  • Jcan123
    Incorrect permissions can be set in Exchange System Manager at the Organization level or server level or mailbox level. Check these levels for their security. The security page is not visible by default. You'll have to add a registry key.
    0 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: