Hi Doug I finally managed to find out and obvious it isn't. The guy had explicit permissions to the Exchange Enterprise Servers group in AD Users and Groups. Removing him from the Security tab of that group finally removed all his inherited permissions at Org. level in Exchange System Manager and hence all the way down the tree. I have to say that the connection between the two is not one that would ever have occurred to me. I only managed to find it by reading the help files and then some lateral thinking. Many thanks for your help. Regards, Paul Lemonidis. ----- Original Message ----- From: Stelley, Doug To: [ExchangeList] Sent: Monday, April 28, 2003 6:15 PM Subject: [exchangelist] RE: E2K\AD Hirearchy Question. http://www.MSExchange.org/ The highest I can think of is Enterprise Admin -----Original Message----- From: paul_lemonidis@xxxxxxxxxxx [mailto:paul_lemonidis@xxxxxxxxxxx] Sent: Monday, April 28, 2003 1:08 PM To: [ExchangeList] Subject: [exchangelist] E2K\AD Hirearchy Question. http://www.MSExchange.org/ Hello all I have a problem that I need help with please. Any help will be most gratefully recieved. What exactly is the logic behind the Exchange Organisation in E2K. I have a user, who incidentally is also the person who installed AD and subsequesntly E2K, and at every single hirearchy level in the Exchange System Manager he shows a having his explicit permissions as inherited from above. Problem is, what is above the Organsation level?????? I have searched though and AD users and Groups and just everything I can think of. I have even run up ADSI Edit and am totally stumped as to where these permissions are being inherited from? Am I missing something or is something awry? After all it would seem to me that top of Organisation should mean just that but apparently it doesn't? Many thanks in advance. Regards, Paul Lemonidis. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: dstelley@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: paul_lemonidis@xxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') _______________________ Confidentiality Notice: The information contained in this message may be legally privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any release, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error please notify the author immediately by replying to this message and deleting the original message. Thank you.