This does not sound right. Spin up a VM with Windows 2003 and run dcpromo to make a new forest. Run the Exchange setup /forestprep and setup /domainprep. Look at the permissions and compare. You can use dsacls to export them.
Thanks, Brian Desmond [email protected] w – 312.625.1438 | c – 312.731.3132 -----Original Message----- From: Juned Shaikh [mailto:[email protected]] Sent: Tuesday, October 18, 2011 6:45 PM To: NT System Admin Issues Subject: SELF privileges at Domain Level Quickhelp: Environment : Environment Windows 2K3 native domain with Exchange 2003 We are facing an issue where *Any* user can help themselves adding to any group through Outlook. It seems that the issue is linked to "SELF" group having FULL CONTROL At the domain level. Hence my question for experts here are to identify --> Whether you see SELF group at the domain level and if yes, what are the permissions. Thanks in advance, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
