Problem...

I have just noticed that any user can open any user's
Inbox, Calendar etc... from their Outlook client.

How do I lock it down just to that user - so that they can
access their Mailbox only and nobody else's?

This is urgent!

Skc

Henry
Wed Dec 10 04:33:18 CST 2003

By default this is not possible.
What did you do to change it ?

--
Henry Craven.

========= Post It Appropriately: ============
SBS 4/4.5 : microsoft.public.backoffice.smallbiz
SBS 2000 : microsoft.public.backoffice.smallbiz2000
SBS 2003 : microsoft.public.windows.server.sbs
=====================================
"skc" <anonymous@discussions.microsoft.com> wrote in message
news:032101c3bf06$fe3c4ea0$a001280a@phx.gbl...
> I have just noticed that any user can open any user's
> Inbox, Calendar etc... from their Outlook client.
>
> How do I lock it down just to that user - so that they can
> access their Mailbox only and nobody else's?
>
> This is urgent!
>
> Skc

Jim
Wed Dec 10 04:31:23 CST 2003

Are your users domain administrators? At most users might be local
workstation administrators but they should not all be domain
administrators.

"skc" <anonymous@discussions.microsoft.com> wrote:

>I have just noticed that any user can open any user's
>Inbox, Calendar etc... from their Outlook client.
>
>How do I lock it down just to that user - so that they can
>access their Mailbox only and nobody else's?
>
>This is urgent!
>
>Skc

Jim B. SBS MVP
remove the mvp to send email

Gerry
Wed Dec 10 04:30:32 CST 2003

quick and dirty solution - go to each Outlook client - open up folder list
(from View menu), right-click on each folder in the tree and select
properties. In there go to the permissions tab and make sure that default
is set to none and that there are no other permissions in there unless
explicitly wanted.

Could take while with lots of client machines but this will close up that
loophole.

Also check on each User account in AD that the Delegate permissions have not
been set to "everyone"

Gerry

"skc" <anonymous@discussions.microsoft.com> wrote in message
news:032101c3bf06$fe3c4ea0$a001280a@phx.gbl...
> I have just noticed that any user can open any user's
> Inbox, Calendar etc... from their Outlook client.
>
> How do I lock it down just to that user - so that they can
> access their Mailbox only and nobody else's?
>
> This is urgent!
>
> Skc

skc
Wed Dec 10 04:57:10 CST 2003

see inline

>-----Original Message-----
>quick and dirty solution - go to each Outlook client -
open up folder list
>(from View menu), right-click on each folder in the tree
and select
>properties. In there go to the permissions tab and make
sure that default
>is set to none and that there are no other permissions in
there unless
>explicitly wanted.
>
>Could take while with lots of client machines but this
will close up that
>loophole.
>
>Also check on each User account in AD that the Delegate
permissions have not
>been set to "everyone"

Where do I find this?????

>
>Gerry
>
>"skc" <anonymous@discussions.microsoft.com> wrote in
message
>news:032101c3bf06$fe3c4ea0$a001280a@phx.gbl...
>> I have just noticed that any user can open any user's
>> Inbox, Calendar etc... from their Outlook client.
>>
>> How do I lock it down just to that user - so that they
can
>> access their Mailbox only and nobody else's?
>>
>> This is urgent!
>>
>> Skc
>
>
>.
>

skc
Wed Dec 10 04:57:53 CST 2003

Changed nothing.

This happened before too....I posted an article 2 years
ago and it was solved.

>-----Original Message-----
>By default this is not possible.
>What did you do to change it ?
>
>--
>Henry Craven.
>
>========= Post It Appropriately: ============
>SBS 4/4.5 : microsoft.public.backoffice.smallbiz
>SBS 2000 : microsoft.public.backoffice.smallbiz2000
>SBS 2003 : microsoft.public.windows.server.sbs
>=====================================
>"skc" <anonymous@discussions.microsoft.com> wrote in
message
>news:032101c3bf06$fe3c4ea0$a001280a@phx.gbl...
>> I have just noticed that any user can open any user's
>> Inbox, Calendar etc... from their Outlook client.
>>
>> How do I lock it down just to that user - so that they
can
>> access their Mailbox only and nobody else's?
>>
>> This is urgent!
>>
>> Skc
>
>
>.
>

skc
Wed Dec 10 04:58:40 CST 2003

Users are not Domain Admins.

They are local Admins.

>-----Original Message-----
>Are your users domain administrators? At most users might
be local
>workstation administrators but they should not all be
domain
>administrators.
>
>"skc" <anonymous@discussions.microsoft.com> wrote:
>
>>I have just noticed that any user can open any user's
>>Inbox, Calendar etc... from their Outlook client.
>>
>>How do I lock it down just to that user - so that they
can
>>access their Mailbox only and nobody else's?
>>
>>This is urgent!
>>
>>Skc
>
>Jim B. SBS MVP
>remove the mvp to send email
>.
>

Marina
Wed Dec 10 05:38:39 CST 2003

AD Users and Groups, properties of user, one of those tabs Exchange (you
might have to turn on Advanced View), Mailbox rights.

Marina

"skc" <anonymous@discussions.microsoft.com> schreef in bericht
news:087b01c3bf0c$5c47fbc0$a401280a@phx.gbl...
> see inline
>
> >-----Original Message-----
> >quick and dirty solution - go to each Outlook client -
> open up folder list
> >(from View menu), right-click on each folder in the tree
> and select
> >properties. In there go to the permissions tab and make
> sure that default
> >is set to none and that there are no other permissions in
> there unless
> >explicitly wanted.
> >
> >Could take while with lots of client machines but this
> will close up that
> >loophole.
> >
> >Also check on each User account in AD that the Delegate
> permissions have not
> >been set to "everyone"
>
> Where do I find this?????
>
> >
> >Gerry
> >
> >"skc" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:032101c3bf06$fe3c4ea0$a001280a@phx.gbl...
> >> I have just noticed that any user can open any user's
> >> Inbox, Calendar etc... from their Outlook client.
> >>
> >> How do I lock it down just to that user - so that they
> can
> >> access their Mailbox only and nobody else's?
> >>
> >> This is urgent!
> >>
> >> Skc
> >
> >
> >.
> >

skc
Wed Dec 10 06:39:54 CST 2003

Everyone was in there with Read, Change, Take Ownership
and Full Mailbox Access rights.

If I Disallow these, this still does not work. If I
remove everyone - this does not work either - or do I have
to reboot the server?

>-----Original Message-----
>AD Users and Groups, properties of user, one of those
tabs Exchange (you
>might have to turn on Advanced View), Mailbox rights.
>
>Marina
>
>"skc" <anonymous@discussions.microsoft.com> schreef in
bericht
>news:087b01c3bf0c$5c47fbc0$a401280a@phx.gbl...
>> see inline
>>
>> >-----Original Message-----
>> >quick and dirty solution - go to each Outlook client -
>> open up folder list
>> >(from View menu), right-click on each folder in the
tree
>> and select
>> >properties. In there go to the permissions tab and
make
>> sure that default
>> >is set to none and that there are no other permissions
in
>> there unless
>> >explicitly wanted.
>> >
>> >Could take while with lots of client machines but this
>> will close up that
>> >loophole.
>> >
>> >Also check on each User account in AD that the Delegate
>> permissions have not
>> >been set to "everyone"
>>
>> Where do I find this?????
>>
>> >
>> >Gerry
>> >
>> >"skc" <anonymous@discussions.microsoft.com> wrote in
>> message
>> >news:032101c3bf06$fe3c4ea0$a001280a@phx.gbl...
>> >> I have just noticed that any user can open any user's
>> >> Inbox, Calendar etc... from their Outlook client.
>> >>
>> >> How do I lock it down just to that user - so that
they
>> can
>> >> access their Mailbox only and nobody else's?
>> >>
>> >> This is urgent!
>> >>
>> >> Skc
>> >
>> >
>> >.
>> >
>
>
>.
>

Merv
Wed Dec 10 06:56:02 CST 2003

Any help here...

XADM: Exchange 2000 Users Have Full Mailbox Access to the Mailboxes of Other
Users
http://support.microsoft.com/default.aspx?scid=kb;en-us;328670

--
Merv Porter [SBS MVP]
===================================
"skc" <anonymous@discussions.microsoft.com> wrote in message
news:094a01c3bf1a$b63ef4e0$a501280a@phx.gbl...
> Everyone was in there with Read, Change, Take Ownership
> and Full Mailbox Access rights.
>
> If I Disallow these, this still does not work. If I
> remove everyone - this does not work either - or do I have
> to reboot the server?
>
> >-----Original Message-----
> >AD Users and Groups, properties of user, one of those
> tabs Exchange (you
> >might have to turn on Advanced View), Mailbox rights.
> >
> >Marina
> >
> >"skc" <anonymous@discussions.microsoft.com> schreef in
> bericht
> >news:087b01c3bf0c$5c47fbc0$a401280a@phx.gbl...
> >> see inline
> >>
> >> >-----Original Message-----
> >> >quick and dirty solution - go to each Outlook client -
> >> open up folder list
> >> >(from View menu), right-click on each folder in the
> tree
> >> and select
> >> >properties. In there go to the permissions tab and
> make
> >> sure that default
> >> >is set to none and that there are no other permissions
> in
> >> there unless
> >> >explicitly wanted.
> >> >
> >> >Could take while with lots of client machines but this
> >> will close up that
> >> >loophole.
> >> >
> >> >Also check on each User account in AD that the Delegate
> >> permissions have not
> >> >been set to "everyone"
> >>
> >> Where do I find this?????
> >>
> >> >
> >> >Gerry
> >> >
> >> >"skc" <anonymous@discussions.microsoft.com> wrote in
> >> message
> >> >news:032101c3bf06$fe3c4ea0$a001280a@phx.gbl...
> >> >> I have just noticed that any user can open any user's
> >> >> Inbox, Calendar etc... from their Outlook client.
> >> >>
> >> >> How do I lock it down just to that user - so that
> they
> >> can
> >> >> access their Mailbox only and nobody else's?
> >> >>
> >> >> This is urgent!
> >> >>
> >> >> Skc
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

skc
Wed Dec 10 08:26:46 CST 2003

They were domain admins - I have taken them off.

>-----Original Message-----
>Are your users domain administrators? At most users might
be local
>workstation administrators but they should not all be
domain
>administrators.
>
>"skc" <anonymous@discussions.microsoft.com> wrote:
>
>>I have just noticed that any user can open any user's
>>Inbox, Calendar etc... from their Outlook client.
>>
>>How do I lock it down just to that user - so that they
can
>>access their Mailbox only and nobody else's?
>>
>>This is urgent!
>>
>>Skc
>
>Jim B. SBS MVP
>remove the mvp to send email
>.
>

skc
Wed Dec 10 08:27:24 CST 2003

That hit the nail on the head - plus the fact that users
were Domain Admins on their local machines as well as
Local Admin.

>-----Original Message-----
>Any help here...
>
>XADM: Exchange 2000 Users Have Full Mailbox Access to the
Mailboxes of Other
>Users
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;328670
>
>--
>Merv Porter [SBS MVP]
>===================================
>"skc" <anonymous@discussions.microsoft.com> wrote in
message
>news:094a01c3bf1a$b63ef4e0$a501280a@phx.gbl...
>> Everyone was in there with Read, Change, Take Ownership
>> and Full Mailbox Access rights.
>>
>> If I Disallow these, this still does not work. If I
>> remove everyone - this does not work either - or do I
have
>> to reboot the server?
>>
>> >-----Original Message-----
>> >AD Users and Groups, properties of user, one of those
>> tabs Exchange (you
>> >might have to turn on Advanced View), Mailbox rights.
>> >
>> >Marina
>> >
>> >"skc" <anonymous@discussions.microsoft.com> schreef in
>> bericht
>> >news:087b01c3bf0c$5c47fbc0$a401280a@phx.gbl...
>> >> see inline
>> >>
>> >> >-----Original Message-----
>> >> >quick and dirty solution - go to each Outlook
client -
>> >> open up folder list
>> >> >(from View menu), right-click on each folder in the
>> tree
>> >> and select
>> >> >properties. In there go to the permissions tab and
>> make
>> >> sure that default
>> >> >is set to none and that there are no other
permissions
>> in
>> >> there unless
>> >> >explicitly wanted.
>> >> >
>> >> >Could take while with lots of client machines but
this
>> >> will close up that
>> >> >loophole.
>> >> >
>> >> >Also check on each User account in AD that the
Delegate
>> >> permissions have not
>> >> >been set to "everyone"
>> >>
>> >> Where do I find this?????
>> >>
>> >> >
>> >> >Gerry
>> >> >
>> >> >"skc" <anonymous@discussions.microsoft.com> wrote in
>> >> message
>> >> >news:032101c3bf06$fe3c4ea0$a001280a@phx.gbl...
>> >> >> I have just noticed that any user can open any
user's
>> >> >> Inbox, Calendar etc... from their Outlook client.
>> >> >>
>> >> >> How do I lock it down just to that user - so that
>> they
>> >> can
>> >> >> access their Mailbox only and nobody else's?
>> >> >>
>> >> >> This is urgent!
>> >> >>
>> >> >> Skc
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>

Merv
Wed Dec 10 14:13:00 CST 2003

Nice call Jim. :-)

"Jim Behning" <jimbehningmvp@atl.mindspring.com> wrote in message
news:petdtv00jg12qdkjj3quqfu176cgkgaq0d@4ax.com...
> Are your users domain administrators? At most users might be local
> workstation administrators but they should not all be domain
> administrators.
>
> "skc" <anonymous@discussions.microsoft.com> wrote:
>
> >I have just noticed that any user can open any user's
> >Inbox, Calendar etc... from their Outlook client.
> >
> >How do I lock it down just to that user - so that they can
> >access their Mailbox only and nobody else's?
> >
> >This is urgent!
> >
> >Skc
>
> Jim B. SBS MVP
> remove the mvp to send email