Indeed a valid reason. I'd argue there should be a special account for that task and that account should not be a member of the domain admins group and should not be a member of the normal Exchange Admins group either, but should be in a special Exchange Service Account group. Knowledge and use of that account should also be limited to the smallest possible group.
> -----Original Message----- > From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] > Sent: Thursday, April 11, 2002 3:17 PM > To: Exchange Discussions > Subject: RE: Full access > > > Sometimes you need to export everyone's mail with ExMerge. > That's when you need to have full access to everyone's mailbox. > > -----Original Message----- > From: Chris Scharff [mailto:[EMAIL PROTECTED]] > Sent: Thursday, April 11, 2002 1:01 PM > To: Exchange Discussions > Subject: RE: Full access > > > Runs counter to several things I would consider best practices. > > 1. Domain Admin accounts should not be mailbox enabled. > 2. Users should be logging in as domain admin accounts for > day to day work. 3. All Domain Admins might also be Exchange > Admins, but that doesn't mean that the rights should be > applied to that group, rather those users should be part of > an Exchange admins group. 4. Users with the ability to log > into mailboxes should be limited to the smallest group of > users possible. > > I'm sure there are others, but I'm hungry and headed out for lunch. > > > -----Original Message----- > > From: Woodruff, Michael [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, April 11, 2002 11:56 AM > > To: Exchange Discussions > > Subject: RE: Full access > > > > > > Why is this a bad design? > > > > -----Original Message----- > > From: Chris Scharff [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, April 11, 2002 12:52 PM > > To: Exchange Discussions > > Subject: RE: Full access > > > > > > Asked and answered at least once this week already I think. > > Q258183. I'll skip the diatribe on what a bad design that > > particular question implies. > > > > > -----Original Message----- > > > From: Woodruff, Michael [mailto:[EMAIL PROTECTED]] > > > Sent: Thursday, April 11, 2002 11:46 AM > > > To: Exchange Discussions > > > Subject: Full access > > > > > > > > > What is the best way to give Domain Admins full access to > > all PFs and > > > Mailboxes in Exchange2k? _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
