RE: Stop Administrator to access others mail b ox

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 8 Jul 2004 08:01:57 -0500

Hi John,

Don't forget the split DNS and "open a port" issues ;-)

Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: Thursday, July 08, 2004 3:39 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Stop Administrator to access others mail b
ox


http://www.MSExchange.org/

> I want the technical solution. If I know the admin password I can
open.
> 
> Is  there any other solution, lets if the persons knows the admin
password
> even than he can not open others mail box.

OK, let me see if I understand what you are asking. You want people to
be
able to use the administrator account, yet you do not want everyone who
uses
that account to be able to access everything the administrator account
has
access to. Is that correct?

<RANT ON>

Fix your security problem correctly, not look for a work around that
will
create even more problems!

You people come on lists like this wanting easy answers to the problems
you
created in the first place because you do not even know what you are
doing. 

If Exchange had been installed correctly, meaning using best practices,
you
would not have this problem as you would have been logged in as a
specific
special user such as exadmin that is only for absolute uncontrolled
access
to Exchange. The domain/local administrator account would not have had
full
access to it.

You people need to get off your duffs and start learning about the
fundamentals and basics before you start working on such complex things
such
as Exchange. 

No one has any business touching an Exchange server without basic
knowledge
of Active Directory, (NT 4.0 Domains,) security accounts, user's
permissions, relaying, DNS and so forth.

Personally, I am getting sick and tired of seeing posts on this and
other
lists of questions that if the poster had bothered to learn some basics
first, they would have at least a simple understanding of what is
needed,
and then help in looking and understanding the problem instead of
looking
for an answer of do this or do that.

Like the old saying: If a man is hungry, give him food and he will be
hungry
again tomorrow. Give him fishing pole and teach him how to fish and he
will
be satisfied day after day. (My wife says I am terrible at paraphrasing,
so
forgive me if that is not exactly correct.)

<RANT OFF>

My blast shields are up, fire away.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
tshinder@xxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist


Other related posts: