Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Exchange Server 2000

  1. December 16th, 2003, 02:54 PM #1
    jpfastball34
    jpfastball34 is offline
    Member
    Join Date
    Dec 2003
    Posts
    31

    Exchange Server 2000

    I have a question for the people out there. I have an issue with my exchange server at work. There is a problem now that all the domain admins in my active directory scheme can view everyone's email box and view every folder. Is there someway that I can stop this from happening. There is a major permission problem somewhere and I can't figure out where. I have gone to Microsoft's website and found nothing. So I was hoping that the brilliant minds that search this site might be able to help me out.
    Much thanks,
    JP


    Reply With Quote Reply With Quote
  2. December 16th, 2003, 04:27 PM #2
    SDK
    SDK is offline
    AO French Antique News Whore
    Join Date
    Aug 2001
    Posts
    2,126
    Not Realy... Domain Admin have all the right! They can view anything they want! Even the President Email and personnal lfile if they want!
    -Simon \"SDK\"
    Reply With Quote Reply With Quote
  3. December 16th, 2003, 05:03 PM #3
    jpfastball34
    jpfastball34 is offline
    Member
    Join Date
    Dec 2003
    Posts
    31
    That's what I thought too but the domain admins didn't have the access to it before. Myself and my boss are the only domain admins. I don't care about having the access but he does so I was just wondering if there was a way to make it so that it doesn't happen.
    JP


    Reply With Quote Reply With Quote
  4. December 16th, 2003, 05:29 PM #4
    Tiger Shark
    Tiger Shark is offline
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    I believe what we did was remove the permission of the Admins from the mailboxes of the users on the M drive.... You can always go ahead and add them back if you need to. I'd test that with a dummy mailbox first though.... The old brain cell isn't what it used to be.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides
    Reply With Quote Reply With Quote
  5. December 16th, 2003, 05:34 PM #5
    RoadClosed
    RoadClosed is offline
    Senior Member RoadClosed's Avatar
    Join Date
    Jun 2003
    Posts
    3,834
    They didn't have access because that is the dafault in 2000.... someone changed it.

    Here is some info from technet....

    Exchange 2000 tightens the site service account loophole considerably; the site service account no longer exists, and the Administrator account and the Domain Admins and Enterprise Admins groups are explicitly denied access to individual mailboxes. (See the Microsoft article "XADM: How to Get Service Account Access to All Mailboxes in Exchange 2000" at http://support.microsoft.com/default...262054&sd=tech for instructions about how to give snooping power to a designated account.) You can also use message journaling in Exchange 2000.

    //edit I am thinking you can reverse engineer what is stated in the article...? I am with Tiger, I would make a backup and test a dummy account. Too many sleepless night with exchange....
    Reply With Quote Reply With Quote
  6. December 16th, 2003, 05:43 PM #6
    jpfastball34
    jpfastball34 is offline
    Member
    Join Date
    Dec 2003
    Posts
    31
    Thanks for that info I'll have to try those things and see what happens. Thanks for taking the time to write something in.
    JP
    JP


    Reply With Quote Reply With Quote
  7. December 16th, 2003, 10:29 PM #7
    Nightfalls_Girl
    Nightfalls_Girl is offline
    Banned
    Join Date
    Jun 2003
    Posts
    1,536
    Just a thought, this sight might help you.

    http://www.labmice.net/ActiveDirectory/default.htm

    Than again may be not, GOOD LUCK!!


    Nightfalls_Girl
    Reply With Quote Reply With Quote
  8. December 17th, 2003, 04:00 PM #8
    jpfastball34
    jpfastball34 is offline
    Member
    Join Date
    Dec 2003
    Posts
    31
    Thank you for putting those links there I'll see if they help. Thanks a bunch!
    JP


    Reply With Quote Reply With Quote
  9. December 17th, 2003, 05:18 PM #9
    jpfastball34
    jpfastball34 is offline
    Member
    Join Date
    Dec 2003
    Posts
    31
    Thank you for that site once again Nightfalls_Girl that was a really great site with helpful stuff on it I really appreciate your help.
    JP
    JP


    Reply With Quote Reply With Quote
  10. December 17th, 2003, 11:11 PM #10
    Drunk On Duvel
    Drunk On Duvel is offline
    Banned
    Join Date
    Jul 2003
    Posts
    325
    Holy ****, NFG was actually helpful. ALERT THE PRESS.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules