So who added the permissions? It sure as heck isn't in there to begin with. Domain Users should not be listed at all. In order to make sure that your users will be find after removing that permission, go into the properties of the user and go to the Exchange Advanced Tab. Click on Mailbox Rights, then make sure that SELF has Read and Full Mailbox rights. It should be in there, as it is added when you create the mailbox. As long as that is there, you should remove the Domain Users permissions.
Ben Winzenz Network Engineer Gardner & White (317) 581-1580 ext 418 -----Original Message----- From: Doug [mailto:[EMAIL PROTECTED] Posted At: Thursday, July 24, 2003 10:14 AM Posted To: Exchange (Swynk) Conversation: Exchange2000 permissions Subject: Exchange2000 permissions We have just discovered that any user can open any other users mailbox. I have been trying to find a list of what the default permissions should be with no luck. Domain Users has all but full control at the top level of the mailbox store which I am guessing is bad. I am a little reluctant to be messing around at that level. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=& lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]