Re: Default Group Memberships

From: N. Hughes (quadrantcomputerNOSPAM_at_hotmail.com)
Date: 07/09/04 

Date: Fri, 9 Jul 2004 14:52:29 +1000

Hi Henry
Thanks for getting back so quickly.

Yes, I think there's something wrong here!
She is member of Back Office Internet Users, Back Office Remote Operators,
Domain Users, and the local mail distribution group.
Mailbox rights - there are a combination of 9 users and groups which have
access, and all are inherited except Self.
Local Admin, Domain Admins, Enterprise Admins - denied full access,
otherwise top 4 permissions,
Exchange Domain Servers and Domain Users - full access [ouch!]
Everyone - read
Unknown entry (list of numbers) - Full Access ????
Self - read and full access
Server$ - Full access.

OK Henry - which ones do I keep/need!

TIA Norm Hughes

"Henry Craven" <IUnknown@Dot.Nyet> wrote in message
news:ekJEo2WZEHA.996@TK2MSFTNGP12.phx.gbl...
> What is her Group membership,
> and what mailbox rights does that group have
> in the AD User Properties
> - Exchange Advanced
> - Mailbox Rights ?
>
> --
> Henry Craven {SBS-MVP}
> Melbourne Australia
>
> "N. Hughes" <quadrantcomputerNOSPAM@hotmail.com> wrote in message
> news:u99QObUZEHA.3304@TK2MSFTNGP09.phx.gbl...
> > A new staff member at one of our sites has just rang me to enquire
> whether
> > she really should be able to open anyone's mailbox! Apparently all
> she has
> > to do in Outlook (2002) is go to Open/Other users folder, put in the
> name,
> > and voila! she can see their mailbox!
> >
> > Now why should this be? No-one has given permission to anyone else, so
> I'm
> > assuming wrong/modified Group relationships. So just what are the
> default
> > group memberships for ordinary and power users?
> >
> > TIA
> > Norm Hughes
> >
> >
>
>

Relevant Pages

  • Re: problem with logon on a windows 2000 or XP client machine
    ... member of the local users groups. ... the local administrator group on the computer), I get my desktop and I ... When I add the domain users ... to the local administrators group and log in with a domain user ...
    (microsoft.public.win2000.security)
  • Re: Putting Users in Groups
    ... And the C) group need to be the member of Domain Users group and Remote Web ... Microsoft Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Login Script
    ... My goal is to have a user account just be a member of "DOMAIN USERS" but ... still be a "LOCAL ADMINISTRATOR". ... >> I'm trying to add the current user (member of DOMAIN USER GROUP) to the ... > This isn't appropriate for a Startup or Logon script. ...
    (microsoft.public.win2000.active_directory)
  • Re: Can this be done without affecting current configuration
    ... What I would like to do is to allow all non-domain PCs to be able to access one shared folder in one of the member server within the domain using one particular user account. ... I removed this user from the domain users group so it only belong to the nondomainuser group. ... this account is also able to access shared folders that are accessible by the members in the domain users group which is something I don't want. ...
    (microsoft.public.windows.server.security)
  • Re: Can this be done without affecting current configuration
    ... I removed this user from the domain users ... group so it only belong to the nondomainuser group. ... user is able to access the shared folder without problem. ... user account is not a member of the domain users, ...
    (microsoft.public.windows.server.security)