RE: Administrator locked out of exchange organization HELP!!!!

From: Val Tuckett [MSFT] (valt_at_online.microsoft.com)
Date: 03/19/04 

Date: Fri, 19 Mar 2004 01:05:13 GMT

Hi Brian,

A method to recover your Administrative permissions to the Server object is
by creating a new user account in AD and delegating it Exchange Full
Administrator rights at the AG (Admin Group) level.

These rights by default should be inherited by the Server object, so you
can then logon using the new account, see the server object and permissions
and fix the Administrator rights.

Once resolved check the following articles for the default roles used
within Exchange, and how to set mailbox access (or Service Account Access).
Simply verify these rights are NOT defined and your administrator shouldn't
have access to people's mailboxes.

289811 XGEN: Exchange 2000 Role Permissions
http://support.microsoft.com/?id=289811

262054 XADM: How to Get Service Account Access to All Mailboxes in Exchange
2000
http://support.microsoft.com/?id=262054

Regards,
Val

--------------------
>
>Hello,
>
>I was trying to prevent the administrator from accessing (reading) other
>users mailboxes.
>
>I right clicked on exchange object in the mmc, went to the security tab and
>denied full control for the administrator.
>Now when I click on the exchange object in the mmc there is nothing there.
>Also, when I display the properties it says "No properties available for
>this object."
>
>I believe there is a way to restore it back to the way it was with
ADSIEDIT.
>Could someone please give me the exact directions on how to do it?
>
>Also, what do I need to do in order to NOT allow the administrator access
to
>other users mailboxes.
>
>
> 

----
Val Tuckett
Microsoft PSS
This posting is provided 'AS IS' with no warranties and confers no rights.
Please do not send email directly to this alias.  This alias is for 
newsgroup purposes only.

Relevant Pages

  • Re: Exchange 2000 & Administrator Rights
    ... Thank you for this but again I cannot beleive that you need full rights over ... to do with Exchange and as a result do not need rights. ... > To completely administrator the Exchange server, ... > Administrator should be a member of local administrator. ...
    (microsoft.public.exchange2000.general)
  • Re: Exchange 2000 & Administrator Rights
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... |To completely administrator the Exchange server, ... |Administrator should be a member of local administrator. ...
    (microsoft.public.exchange2000.general)
  • RE: Exchange 2000 & Administrator Rights
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Exchange Administrator on an ... |Administrators group gets over Exchange which make membership of this ...
    (microsoft.public.exchange2000.setup.installation)
  • Re: Exchange 2000 & Administrator Rights
    ... To completely administrator the Exchange server, ... Administrator should be a member of local administrator. ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.exchange2000.general)
  • Re: Exchange 2000
    ... Ok, I have checked the rights on the server object in ESM, and they seem ... > the Organization and AG levels of your Exchange org. ...
    (microsoft.public.exchange2000.admin)