Re: Queue Properties - Security
- From: <paul_lemonidis@xxxxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Wed, 4 Jun 2003 00:09:36 +0100
Hi Hermano
From the message below it seem you are using file based AV software
(Symantec Corprate Edition by any chance?) on an Exchange 2000 machine and
have not excluded the Exchnage folders from the scan. You need to this ASAP
otherwise your database will probably get corrupted. See TechNet article
245822 and 241855 and I think all will become clearer.
If you are not already you need to put an Exchnage AV package in place on
the server. The access denied message is probably because of a bug that the
AV software has. I have come across it oa couple of times before a while
ago. Cannot be more specific on that one though I'm afraid. I very much
doubt you have a security issue.
If you want message me at about 10AM UK time and we can compare folder
permissions but my advice is leave well alone if all is working fine.
Hope that helps.
Bye for now.
Paul Lemonidis..
----- Original Message -----
From: "Hermano Queiroz" <hjsqueiroz@xxxxxxxxxxxxxxxxxx>
To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
Sent: Tuesday, June 03, 2003 6:20 PM
Subject: [exchangelist] Queue Properties - Security
> http://www.MSExchange.org/
>
> Hi Everyone,
>
> Does anybody knows what I need to do to prevent this kind of problem. I'm
> thinking about privilegies on this folder or something else, because
> before all virus that was comming through was deleted before going to
> queue folder, but since last week this situation start to be a little more
> complicated. Does anyone has any clue or suggestion about it. Actually I
> also need to know to compare the security rights on this folder with
> someone else, which one needs to have access and who. Can you tell me
> this.
> TIA
>
> PS. The Antivirus is updated and running, so didn't change anything since
> last week, unless I'm unware off it.
>
> Virus Found!Virus name: W32.Sobig.A@xxxxxx in File:
> E:\Program Files\Exchsrvr\Mailroot\vsi
> 4\Queue\NTFS_eaca40b501c329ce000016d6.EML
> by: Realtime Protection scan.
> Action: Delete failed :
> Quarantine failed :
> Access denied
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List as:
paul_lemonidis@xxxxxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')
>
Other related posts:
