RE: Restricting Domain and Enterprise Admins from accessing Mailboxes

  • From: "Michael B. Smith" <michael@xxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 24 Mar 2005 15:29:55 -0500

Remove them from those groups if they cannot be trusted.
By DEFINITION, a Domain Admin has full access to a domain.
By DEFINITION, an Enterprise Admin has full access to an enterprise.


From: Ghassan Hassan [mailto:ghassan@xxxxxxx] 
Sent: Thursday, March 24, 2005 3:22 PM
To: [ExchangeList]
Subject: [exchangelist] Restricting Domain and Enterprise Admins from
accessing Mailboxes



What is the best way to prevent "Domain admins group" and "Enterprise
admins group" from granting themselves access to users' mailboxes in
Exchange 2003?  


I know by default, they do not have access to user's mailbox but they
can grant themselves access.  The idea is to ONLY allow a specific group
(i.e security) who can grant or deny access to a mailbox.






List Archives:
Exchange Newsletters:
Exchange FAQ:
Other Internet Software Marketing Sites:
World of Windows Networking:
Leading Network Software Directory:
No.1 ISA Server Resource Site:
Windows Security Resource Site:
Network Security Library:
Windows 2000/NT Fax Solutions:
You are currently subscribed to this Discussion List as:
To unsubscribe visit
Report abuse to listadmin@xxxxxxxxxxxxxx 

Other related posts: