RE: Restricting Domain and Enterprise Admins from accessing Mailboxes

  • From: "Michael B. Smith" <michael@xxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 24 Mar 2005 15:29:55 -0500

Remove them from those groups if they cannot be trusted.
 
By DEFINITION, a Domain Admin has full access to a domain.
 
By DEFINITION, an Enterprise Admin has full access to an enterprise.

________________________________

From: Ghassan Hassan [mailto:ghassan@xxxxxxx] 
Sent: Thursday, March 24, 2005 3:22 PM
To: [ExchangeList]
Subject: [exchangelist] Restricting Domain and Enterprise Admins from
accessing Mailboxes


http://www.MSExchange.org/


Hello,

 

What is the best way to prevent "Domain admins group" and "Enterprise
admins group" from granting themselves access to users' mailboxes in
Exchange 2003?  

 

I know by default, they do not have access to user's mailbox but they
can grant themselves access.  The idea is to ONLY allow a specific group
(i.e security) who can grant or deny access to a mailbox.

 

 

Thanks,

Ghassan 

 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
michael@xxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx 

Other related posts: