Mailbox security & NT Administrators

[Kent]

How can I configure Exchange so that Domain Admins and NT Admins cannot view/delete/send emails on everyones mailboxes via Outlook 2000 and OWA? It looks like the default installation allows this.

[John Dailey]

Kent,

Check the permissions tab on your Organization, Site, and Configuration containers in Exchange Administrator. Any Group or Account with the role "Service Account Admin" is able to do as you described. Getting rid of the inappropriate accounts and/or groups will fix this. Just be sure to NOT remove your Exchange Service account.

John Dailey
Lead Messaging Analyst
Indiana University Information Technology Services
Messaging Team


------------
Kent at 3/1/00 12:26:57 PM


How can I configure Exchange so that Domain Admins and NT Admins cannot view/delete/send emails on everyones mailboxes via Outlook 2000 and OWA? It looks like the default installation allows this.

[Kent]

John,

Thanks, your suggestion resolved our problem and I feel much more comfortable with our Exchange configuration.

Thank You,
Kent

------------
John Dailey at 3/10/00 9:57:27 AM

Kent,

Check the permissions tab on your Organization, Site, and Configuration containers in Exchange Administrator. Any Group or Account with the role "Service Account Admin" is able to do as you described. Getting rid of the inappropriate accounts and/or groups will fix this. Just be sure to NOT remove your Exchange Service account.

John Dailey
Lead Messaging Analyst
Indiana University Information Technology Services
Messaging Team


------------
Kent at 3/1/00 12:26:57 PM


How can I configure Exchange so that Domain Admins and NT Admins cannot view/delete/send emails on everyones mailboxes via Outlook 2000 and OWA? It looks like the default installation allows this.

[keith]

the permissions assigned in exchange are completely independent of the permissions assigned in NT. Unless a particular domain admin or an NT group is given permissions in Exchange, they will not be able to open another user's mailbox.


------------
Kent at 3/1/00 12:26:57 PM


How can I configure Exchange so that Domain Admins and NT Admins cannot view/delete/send emails on everyones mailboxes via Outlook 2000 and OWA? It looks like the default installation allows this.