Re: How to grand Access right to some mailboxs

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

"BigBIg" <faitai@xxxxxxxxxxxxxx> wrote:

How to grand Access right to a "User", and it has right to lanch specify
mailboxs ?

* such "User" is already belong to Domain Admin

The Domain Admin group (along with other priviledged accounts) have an
inherited "Deny" ACE in the ACL of each mailbox for "Send As" and
"Receive As".

Create a "normal" user account for that person to use (doing everthing
with Domain Admin rights is not such a "good thing"). Then give their
normal account the "Full mailbox access" rights on the mailbox. I
wouldn't give them "Send As" unless you really want them to
impersonate the other user.

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@xxxxxxxxxxxxx
Or to these, either: mailto:h.pott@xxxxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxxxx
.

Relevant Pages

  • Re: the name could not be resolved the bookmark is not valid - MSX
    ... Bookmark not valid errors are indications of permissions issues to the ... or whatever having Domain Admin rights to attack your network. ... You might check to see if you can log into that mailbox from another ... workstation and not your account or mailbox. ...
    (microsoft.public.exchange.clients)
  • Re: Domain admins
    ... > I have recently setup an Exchange 2000 server. ... > user and change the mailbox rights ... when this network was setup everyone was given domain admin group ... > account is set to deny, ...
    (microsoft.public.exchange.admin)
  • Re: the name could not be resolved the bookmark is not valid - MSX
    ... Note that the last time there was an Exchange service account was Exchange 5.5. ... Anyway, best security practice is to not log into e-mail using an administrative account, instead separating your personal and administative duties with separate accounts to minimize the risk of an e-mail-borne attack or one from any other routine web surfing or whatever having Domain Admin rights to attack your network. ... You might check to see if you can log into that mailbox from another workstation; that would tell you that the problem is probably with the workstation and not your account or mailbox. ...
    (microsoft.public.exchange.clients)
  • Re: Domain Admin Server 2003
    ... I no longer have Domain Admin rights and I am not in a privileged group. ... account even though the Domain Admin rights have been taken away. ... >>I had delegated Full rights to my OU's and then was granted Domain Admin ...
    (microsoft.public.security)
  • Re: domain permission problems
    ... i need an account in domain1 to have domain admin rights in domain 1 and 2. ... MCSE, MVP Directory Services ...
    (microsoft.public.windows.server.active_directory)