Re: Restrict calendar views

In the folder rights, no account needs to be present in the list if it
doesn't have rights. There's no "deny" there, so just remove the accounts
that you don't want to have rights. What do Default and Anonymous have?

In Mailbox Rights, the right that matters for what you're seeing is "Full
mailbox access". If nobody but SELF has "Full mailbox access" than nobody
but the owning account gets rights through mailbox ownership. You didn't
report this, but by default "Domain admins", "Enterprise admins" and the
admin account that installed Exchange has an explicit Deny on "Full mailbox
access". If you aren't seeing that, then someone has mucked with your
permissions. Is everyone an administrator in your organization? That would
not be a good thing.
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

"Paul Walker" <noone@xxxxxxxx> wrote in message
news:io0pj2l8fb0kmpniq3rv89s2924s2d60cp@xxxxxxxxxx
Ok Lets call the person who I want to restrict their calendar being
accessed/viewed as being called ADMIN. I have gone into ADMIN calendar
and added everybody in the domain into the permissions section in the
Calendar. I have then set each users NONE permissions. I open the
Outlook of one of these users, go to their calender and click on Open
a shared Calender. I can sucessfully access and view the ADMIN
calender no problem.

There are no delegates present on ADMIN outlook.

In ADUC going to the Exchange Advanced tab, Mailbox rights :

There are a fair few accounts in there. Everyone has the read
permission on Deny. SELF had read and Full mailbox access.
Authenticated Users has everything ticked and greyed out except for
Special Permissions and Associated External Account. Anon has Deny
permission on read.

Why can everybody still look at the ADMIN calendar ?

Thanks

Paul,


.