Agreed, it certainly sounds wrong.

I went back through all the permissions (need to work out how to deny
all the Admins from other sites propagation), but the only commonality
is each mailbox has "Self" with Read and Full Control (default I
believe).  The resource box B has Self with Read, Full Control, and
associated external account, as well as, A and C with Read and Full
Control.

It is almost as if them having shared control of that one box is
bleeding to each other somehow.

Any ideas? 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ed
Crowley [MVP]
Sent: Friday, April 29, 2005 9:21 PM
To: Exchange Discussions
Subject: RE: Transitive Permissions?

That doesn't sound right.  See if there are any other permissions on
those mailboxes such as groups of which they are members. 

Ed Crowley MCSE+Internet MVP
Freelance E-Mail Philosopher
Protecting the world from PSTs and Bricked Backups!T

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of User,
IS
(PHES)
Sent: Friday, April 29, 2005 7:11 AM
To: Exchange Discussions
Subject: Transitive Permissions?

I have noticed something odd on our Exchange 2000 server's mailbox
accounts.

Scenario: 
User A owns his own mailbox and has full control of Resource mailbox B
User C owns her mailbox and also has full control of Resource mailbox B
Resource C has "Self" with the default control for any new mailbox

The problem is that since setting this scenario up, User A can now Send
As User C and vice-versa.

I have had User A and C try to Send As any other user and they get the
normal error message about not being able to send...

It appears as if the shared permissions on Resource mailbox B is giving
them full control of each other's box.  Is this normal?  It doesn't seem
appropriate, but perhaps that is my lack of understanding of resource
mailboxes?  The desire is that both A and C should be able to open
delete, move, send as, from resource B, but not from each other.

Thanks for any ideas!
 
________________________________

Bob Reasoner
Harris County Public Health & Environmental Services


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.




_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to