Re: Messed up Administrator permissions

You shouldn't be using that account. It's a huge security hole.
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

"Naresh" <Naresh@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:09FE724A-0443-428D-813D-3736182675F6@xxxxxxxxxxxxxxxx
>I think I've semi-fixed it now...I had to un-delegate control for the
> Administrator at the root of the tree in Exchange System Manager. This has
> put the permissions back to normal, i.e. Deny is neither checked nor
> greyed-out for Full Mailbox Rights as well as Send As and Receive As.
> However, I still can't to connect to any other mailboxes other than my
> own.
> ??? Which is even more confusing since the permissions seem to indicate
> that
> I can...and doesn't being the Administrator clobber any permissions
> associated with any groups that the Administrator may be a member of???
>
>
> "Naresh" wrote:
>
>> Thanks for the reply. I did notice that about the Domain Admins group,
>> although I still don't know how to change the permissions back for the
>> Administrator so I can connect to all the other mailboxes.
>>
>> Anyway, I'll give the new user thing a try and see how I go with ExMerge.
>> Thanks.
>>
>> "Ed Crowley [MVP]" wrote:
>>
>> > Actually Exchange does an explicit Deny to all members of Domain
>> > Admins.
>> > Create a different account for doing ExMerge and grant it permissions
>> > on the
>> > server or on the mailbox store object.
>> > --
>> > Ed Crowley
>> > MVP - Exchange
>> > "Protecting the world from PSTs and brick backups!"
>> >
>> > "Naresh" <Naresh@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> > news:0A6A2F4B-8433-4412-8242-0F5EBE58999C@xxxxxxxxxxxxxxxx
>> > > Hello...
>> > >
>> > > I seem to have messed up the permissions for the Administrator on our
>> > > Windows Server (2003) as a result of using ExMerge and the Exchange
>> > > System
>> > > Manager, and I was wondering if someone would be able to help. I can
>> > > no
>> > > longer connect to any other mailboxes as the Administrator, and when
>> > > I
>> > > look
>> > > at the mailbox rights via Active Directory, BOTH the Allow and Deny
>> > > boxes
>> > > are
>> > > checked for Full Mailbox Access, but the Deny box is greyed-out so I
>> > > can't
>> > > uncheck it. Similarly, in Exchange System Manager under the Security
>> > > tab
>> > > for
>> > > the mailbox store, BOTH the Allow and Deny boxes are checked for the
>> > > Administrator's Send As and Receive As attributes. I think this is
>> > > the
>> > > reason
>> > > programs like ExMerge aren't letting me manipulate other user's
>> > > mailboxes.
>> > > However, the Administrators group doesn't have the permissions set in
>> > > the
>> > > same way. Does anyone have any ideas how to fix this?
>> > >
>> > > Many thanks...
>> >
>> >
>> >


.

Loading