Exchange Domain Servers group

Tech-Archive recommends: Fix windows errors by optimizing your registry



We have a root domain and several child domains in our organization (all 2003).

The Exchange Enterprise Server group is comprised of the Exchange Domain
Servers group. Some of our child domain admins have put themselves in the
Exchange Domain Servers group and therefore have access to all mailboxes in
the org. According to this article this was going to be addressed in 2003,
but I tried and was able to open another user's mailbox on another domain:

http://support.microsoft.com/default.aspx?scid=kb;en-us;309718

What is the best way to lock this down so this can't happen?

Phillip
.



Relevant Pages

  • Re: Exchange Domain Servers group
    ... permissions are maintained or modified for Exchange Domain Servers. ... Servers group is denied access to all mailboxes by default. ... these permissions can still be modified using ADSIEdit. ...
    (microsoft.public.exchange.admin)
  • RE: Error ID 8270 for Exchange 2003
    ... Check to make sure there is an Exchange Domain Servers group in each of the ... child domains. ... the Recipient Update Service tries to contact a global catalog ...
    (microsoft.public.exchange.admin)
  • Re: Cannot Move Mailboxes
    ... My Exchange Domain Servers group has my admin account, ... service account from the 5.5 box in it. ... check the permissions on the Exchange Domain ...
    (microsoft.public.exchange.admin)
  • Re: Cannot Move Mailboxes
    ... I had the same prob and used a 3rd party tool to do the moves. ... check the permissions on the Exchange Domain ... Servers Group. ...
    (microsoft.public.exchange.admin)