Remove them from those groups if they cannot be trusted. By DEFINITION, a Domain Admin has full access to a domain. By DEFINITION, an Enterprise Admin has full access to an enterprise. ________________________________ From: Ghassan Hassan [mailto:ghassan@xxxxxxx] Sent: Thursday, March 24, 2005 3:22 PM To: [ExchangeList] Subject: [exchangelist] Restricting Domain and Enterprise Admins from accessing Mailboxes http://www.MSExchange.org/ Hello, What is the best way to prevent "Domain admins group" and "Enterprise admins group" from granting themselves access to users' mailboxes in Exchange 2003? I know by default, they do not have access to user's mailbox but they can grant themselves access. The idea is to ONLY allow a specific group (i.e security) who can grant or deny access to a mailbox. Thanks, Ghassan ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: michael@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx