EXPERT RESPONSE
I have to be honest here. I don't even have an Exchange 5.0 server around anymore to verify the setting location for you. However, it should be very similar to Exchange 5.5. There are three locations for the administrative tool (Admin.exe) that control access: the Organization container, the Site containers, and the Configuration (Config) container. You should view the permissions on each of these containers to verify that only the Users and Groups that should have permissions to these containers do. If you see a group like Domain Users or Everyone with permission like Service Account Admin, then you know something is wrong.
Another setting to look at is the Search option. If it has been changed from its default value of None, this can affect mailbox access. Usually the symptom is restricted access. However, if the Everyone group is giving search rights, then that does have the potential to give all users some level of access to every mailbox.
Do you have comments on this Ask the Expert Q&A? Let us know.
Related information from SearchExchange.com:
Expert Advice: Viewing another user's mailbox
Expert Advice: Who has full mailbox access?
Tip: Protect mailbox confidentiality
15 tips in 15 minutes: Managing recipients and distribution lists
Reference Center: Exchange permissions and authentication resources
|