Then use the service account.  I would imagine, all the access needed it
there.

And how often does one run Exmerge?  

--------------------------------------------
Don Ely
Network Engineer
Tripath Imaging, Inc.
(336) 290-8293 - Direct
(336) 516-4519 - Mobile
[EMAIL PROTECTED] - email
http://www.tripathimaging.com




-----Original Message-----
From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, April 11, 2002 4:17 PM
To: Exchange Discussions
Subject: RE: Full access


Sometimes you need to export everyone's mail with ExMerge. That's when you
need to have full access to everyone's mailbox.

-----Original Message-----
From: Chris Scharff [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 11, 2002 1:01 PM
To: Exchange Discussions
Subject: RE: Full access


Runs counter to several things I would consider best practices.

1. Domain Admin accounts should not be mailbox enabled. 
2. Users should be logging in as domain admin accounts for day to day work.
3. All Domain Admins might also be Exchange Admins, but that doesn't mean
that the rights should be applied to that group, rather those users should
be part of an Exchange admins group. 4. Users with the ability to log into
mailboxes should be limited to the smallest group of users possible.

I'm sure there are others, but I'm hungry and headed out for lunch.

> -----Original Message-----
> From: Woodruff, Michael [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, April 11, 2002 11:56 AM
> To: Exchange Discussions
> Subject: RE: Full access
> 
> 
> Why is this a bad design?
> 
> -----Original Message-----
> From: Chris Scharff [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, April 11, 2002 12:52 PM
> To: Exchange Discussions
> Subject: RE: Full access
> 
> 
> Asked and answered at least once this week already I think.
> Q258183. I'll skip the diatribe on what a bad design that 
> particular question implies.
> 
> > -----Original Message-----
> > From: Woodruff, Michael [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, April 11, 2002 11:46 AM
> > To: Exchange Discussions
> > Subject: Full access
> > 
> > 
> > What is the best way to give Domain Admins full access to
> all PFs and
> > Mailboxes in Exchange2k?
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to