It depends. If the mailbox is instantiated in the store then you are updating some MAPI attributes on the mailbox which later get reflected to the AD msExchMailboxSecurityDescriptor attribute. If the mailbox not instantiated, you are modifying the AD msExchMailboxSecurityDescriptor attribute directly.
I am not sure if I understand your second question. Mailboxes are represented in AD by the users they are connected to. This doesn't represent disconnected mailboxes though and in fact, these are not represented in AD at all and must be enumerated directly out of the store. I think that is a rather major shortcoming btw. You should be able to get all of that info directly from AD. That is why ESM can be so slow in pulling up info on mailboxs. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Thursday, July 14, 2005 1:44 PM To: ActiveDir (E-mail) Subject: [ActiveDir] My endless question day continued- Exchange attributes when you give "full control" to a user's mailbox in ADCU, are you editing the security descriptor on the mailbox or the msExchMailboxSecurityDescriptor attribute of the user object? I know changing the atrribute does not get mirrored back to the mailbox sd but it works in the opposite direction- changing the sd on the mailbox updates the atrribute. I was just wondering how that worked under the hood- changing a user's rights on a mailbox and wheter you do it thru ADUC or change thru ESM. Also, am I right in assuming AD only contains the info store object but NOT objects for the mailboxes themselves(at least thats what i see thru adsiedit.msc). Thanks. I apologize for all the questions. I guess it got kinda slow here at work and I started thinking about things. Thanks again List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
