RE: Restricting Domain and Enterprise Admins from accessing Mailboxes

  • From: "William Holmes" <wtholmes@xxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Fri, 25 Mar 2005 08:55:37 -0500

If you don't trust the People that are in the Domain Admins Group or
Enterprise Admins Group then terminate them and hire people you can trust. By
definition these groups either have or can obtain accesss to everything in
your domain including email.  If you don't trust the people you have added to
these groups then you have a bigger and Non-Tehnical problem.


From: Ghassan Hassan [mailto:ghassan@xxxxxxx] 
Sent: Thursday, March 24, 2005 3:22 PM
To: [ExchangeList]
Subject: [exchangelist] Restricting Domain and Enterprise Admins from
accessing Mailboxes



What is the best way to prevent "Domain admins group" and "Enterprise admins
group" from granting themselves access to users' mailboxes in Exchange 2003?


I know by default, they do not have access to user's mailbox but they can
grant themselves access.  The idea is to ONLY allow a specific group (i.e
security) who can grant or deny access to a mailbox.






List Archives:
Exchange Newsletters:
Exchange FAQ:
Other Internet Software Marketing Sites:
World of Windows Networking:
Leading Network Software Directory:
No.1 ISA Server Resource Site:
Windows Security Resource Site:
Network Security Library:
Windows 2000/NT Fax Solutions:
You are currently subscribed to this Discussion List as:
To unsubscribe visit
Report abuse to listadmin@xxxxxxxxxxxxxx 

Other related posts: