Exchange Domain Servers group
- From: "Punxsutawnee Phil" <Punxsutawnee Phil@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 12 Sep 2005 07:55:03 -0700
We have a root domain and several child domains in our organization (all 2003).
The Exchange Enterprise Server group is comprised of the Exchange Domain
Servers group. Some of our child domain admins have put themselves in the
Exchange Domain Servers group and therefore have access to all mailboxes in
the org. According to this article this was going to be addressed in 2003,
but I tried and was able to open another user's mailbox on another domain:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309718
What is the best way to lock this down so this can't happen?
Phillip
.
- Follow-Ups:
- Re: Exchange Domain Servers group
- From: Ben Winzenz [Exchange MVP]
- Re: Exchange Domain Servers group
- Prev by Date: Re: E-Mail Contacts [WILDPACKET]
- Next by Date: Re: Users have no master SID errors in event logs (event id 9548)
- Previous by thread: Users have no master SID errors in event logs (event id 9548)
- Next by thread: Re: Exchange Domain Servers group
- Index(es):
Relevant Pages
|