| Author |
Message |
JJ Obgath
Guest
|
 Posted:
Wed Jan 19, 2005 8:51 pm Post subject:
reading mailbox |
|
|
Hi,
Does anyone know how to detect if anyone changes permissions to be able to
read your mailbox? (i.e. give themselves permissions in AD).
Thanks,
John
|
|
| Back to top |
|
 |
Mark Arnold [MVP]
Guest
|
| Posted:
Wed Jan 19, 2005 9:19 pm Post subject:
Re: reading mailbox |
|
|
On Wed, 19 Jan 2005 14:51:03 -0000, "JJ Obgath" <jiuhffhf@ibm.com>
wrote:
| Quote: | Hi,
Does anyone know how to detect if anyone changes permissions to be able to
read your mailbox? (i.e. give themselves permissions in AD).
Thanks,
John
Yes, use the standard windows auditing. If you activate the auditing |
and select the events to audit then you will receive a log entry when
permissions are changed. |
|
| Back to top |
|
|
JJ Obgath
Guest
|
| Posted:
Wed Jan 19, 2005 9:39 pm Post subject:
Re: reading mailbox |
|
|
I've tried this but don't seem to get enough information. Can you give a
little more info please?
Also is this machine specific or should I see it on any domain controller?
J
"Mark Arnold [MVP]" <mark@mvps.org> wrote in message
news:1jusu0p46gt364b25k8k3gvnil1r96e4lj@4ax.com...
| Quote: | On Wed, 19 Jan 2005 14:51:03 -0000, "JJ Obgath" <jiuhffhf@ibm.com
wrote:
Hi,
Does anyone know how to detect if anyone changes permissions to be able to
read your mailbox? (i.e. give themselves permissions in AD).
Thanks,
John
Yes, use the standard windows auditing. If you activate the auditing
and select the events to audit then you will receive a log entry when
permissions are changed.
|
|
|
| Back to top |
|
|
Mark Arnold [MVP]
Guest
|
| Posted:
Wed Jan 19, 2005 9:51 pm Post subject:
Re: reading mailbox |
|
|
On Wed, 19 Jan 2005 15:39:35 -0000, "JJ Obgath" <jiuhffhf@ibm.com>
wrote:
| Quote: | I've tried this but don't seem to get enough information. Can you give a
little more info please?
Also is this machine specific or should I see it on any domain controller?
J
2 Simple questions for you.. |
1. Does the, or any, Administrative group appear in the Exchange
Domain Servers or Exchange Enterprise Servers groups in AD?
2. When you open ADU&C and make sure you have the Show Advanced
Features enabled (View & tick Advanced Features). Then go to the
properties of a user and select Exchange Advanced and then Mailbox
Rights. Does the, or any, Administrative group appear there with Full
Mailbox Rights. |
|
| Back to top |
|
|
JJ Obgath
Guest
|
| Posted:
Wed Jan 19, 2005 9:58 pm Post subject:
Re: reading mailbox |
|
|
Yes to both questions.
J
"Mark Arnold [MVP]" <mark@mvps.org> wrote in message
news:8a0tu0lr329kq8nf4ie377dhklbar92mb3@4ax.com...
| Quote: | On Wed, 19 Jan 2005 15:39:35 -0000, "JJ Obgath" <jiuhffhf@ibm.com
wrote:
I've tried this but don't seem to get enough information. Can you give a
little more info please?
Also is this machine specific or should I see it on any domain controller?
J
2 Simple questions for you..
1. Does the, or any, Administrative group appear in the Exchange
Domain Servers or Exchange Enterprise Servers groups in AD?
2. When you open ADU&C and make sure you have the Show Advanced
Features enabled (View & tick Advanced Features). Then go to the
properties of a user and select Exchange Advanced and then Mailbox
Rights. Does the, or any, Administrative group appear there with Full
Mailbox Rights. |
|
|
| Back to top |
|
|
Mark Arnold [MVP]
Guest
|
| Posted:
Wed Jan 19, 2005 11:52 pm Post subject:
Re: reading mailbox |
|
|
On Wed, 19 Jan 2005 15:58:10 -0000, "JJ Obgath" <jiuhffhf@ibm.com>
wrote:
| Quote: | Yes to both questions.
J
Bleedin' heck. |
Well, that's your answer. I wouldn't go unilaterally removing that
membership but you need to sit down with your admins and ask what is
going on. |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in