RE: Restricting Domain and Enterprise Admins from accessing Mailboxes
- From: "William Holmes" <wtholmes@xxxxxxxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Fri, 25 Mar 2005 08:55:37 -0500
Hello,
If you don't trust the People that are in the Domain Admins Group or
Enterprise Admins Group then terminate them and hire people you can trust. By
definition these groups either have or can obtain accesss to everything in
your domain including email. If you don't trust the people you have added to
these groups then you have a bigger and Non-Tehnical problem.
Bill
________________________________
From: Ghassan Hassan [mailto:ghassan@xxxxxxx]
Sent: Thursday, March 24, 2005 3:22 PM
To: [ExchangeList]
Subject: [exchangelist] Restricting Domain and Enterprise Admins from
accessing Mailboxes
http://www.MSExchange.org/
Hello,
What is the best way to prevent "Domain admins group" and "Enterprise admins
group" from granting themselves access to users' mailboxes in Exchange 2003?
I know by default, they do not have access to user's mailbox but they can
grant themselves access. The idea is to ONLY allow a specific group (i.e
security) who can grant or deny access to a mailbox.
Thanks,
Ghassan
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
wtholmes@xxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx
Other related posts:
