Home > Ask the Microsoft Exchange Experts > Richard Luckett: Spam and Security Questions & Answers > Who has full Exchange Server mailbox access and permissions?
Ask The Exchange Expert: Questions & Answers
EMAIL THIS

Who has full Exchange Server mailbox access and permissions?

Richard Luckett EXPERT RESPONSE FROM: Richard Luckett

Pose a Question
Other Exchange Categories
Meet all Exchange Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 09 September 2005
Has Microsoft designed Exchange Server 2003 to allow all users to view other users' email in their inboxes? If not all users, what about any user with certain privileges -- like a domain administrator? If so, how can I prevent this? And how can I prove this has happened? Is there a log?


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Richard Luckett: Spam and Security
How effective is tracking the IP address of an email hacker?
Why can't I grant users permissions to an Exchange public folder?
How can I configure Exchange IMF to allow an IP address or DNS?
Tool helps identify inbound Exchange Server email flow issues
Configure SMTP relay restrictions in Exchange Server 2003 to stop spam
How to lock down an SMTP relay to prevent spam in Exchange Server 2003
Connecting an Apple iPhone to Exchange Server on Windows SBS 2003
Why does a security alert pop up when accessing Outlook Web Access?
Exchange email sent to a domain using SPF authentication is returned
Selectively set email permissions for Exchange groups

Microsoft Exchange Server 2003
Configuring the default recipient policy in an Exchange 2003 environment
Removing old disclaimers from Exchange Server 2003
ExMerge gotchas to watch for when migrating Exchange 2003 mailboxes
Recovering deleted items after an Exchange 2003 migration
Linking two Exchange 2003 servers in different forests
Microsoft Exchange Server virtualization tutorial
Installing Exchange Server 2003 and a domain controller on the same hardware
Migrating new users onto Exchange Server 2003
Can Exchange 2003 and Exchange 2007 live on the same domain?
Why Exchange Server 2003 and a BES shouldn't share a domain controller
Microsoft Exchange Server 2003 Research

Microsoft Exchange Server Permissions
Exchange users receiving email addressed to legacy users
Restrict access to Outlook Web Access via Exchange System Manager
Why you should secure Exchange 2007 using administrative policies
Editing Exchange Server public folder permissions
Can't delete old Microsoft Outlook public folders
Why can't I grant users permissions to an Exchange public folder?
Exchange public folder calendar can't be opened in Microsoft Outlook
Grant or deny permissions to access a user's Exchange 2007 mailbox
Set Outlook calendar permissions for group to view private meetings
Exchange Admin 101: Exchange 2003 and Exchange 2007 admin privileges

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
privilege  (SearchExchange.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


In Exchange 5.5, the Exchange Service account had permissions to access all mailboxes in an Exchange Site. In Exchange 2000 and 2003, Microsoft has explicitly denied access to administrative accounts, including domain administrators, enterprise administrators and Exchange full administrators. Only a group called Self, which is the user object being configured, has full mailbox access.

However, a regular domain user account can be delegated access to a folder like Calendar, or the entire mailbox, by the user or an administrator. The good news is that anytime a user who is not "Self" accesses a mailbox, then a 1016 event is generated in the Application log by Exchange.

Do you have comments on this Ask the Expert Q&A? Let us know.

Related information from SearchExchange.com:

  • Tip: Establishing mailbox audit trails on Exchange Server
  • Reference Center: Microsoft Exchange permissions

    		•



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Outlook Web Access (OWA) Tips and Advice
    HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    SEARCH 
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy     		  TechTarget - The IT Media ROI Experts