Outlook 2003 permissions

[RHS]

I haven't been able to figure out how to keep employees from attaching
(adding) other employees mailboxes to their outlook. They do this through
Tools/EMail Accounts/View or change existing email accounts/Change/More
Settings/Advanced, etc...
One employee in particular has added the CEO and another employee's mailbox
to her Outlook. The thing is..I'm not sure if she can actually see any of
the other employees mail. All I know is that the event log on the server
triggers an event when another person's email has been logged into by someone
else.
What kind of permissions on the mailboxes should be set to prevent someone
from accessing someone else's mail from another computer? Or is it set that
way by default?
They seem to default to name: "default", Permission
Level: "none".
In other words, unless you add permissions for someone else to access
someone's mailbox, is it secure?

Thanks,

Robert

 

[Ben M. Schorr - MVP]

I haven't been able to figure out how to keep employees from attaching
(adding) other employees mailboxes to their outlook. They do this through
Tools/EMail Accounts/View or change existing email accounts/Change/More
Settings/Advanced, etc...
One employee in particular has added the CEO and another employee's
mailbox
to her Outlook. The thing is..I'm not sure if she can actually see any of
the other employees mail. All I know is that the event log on the server
triggers an event when another person's email has been logged into by
someone
else.
What kind of permissions on the mailboxes should be set to prevent someone
from accessing someone else's mail from another computer? Or is it set
that
way by default?
They seem to default to name: "default", Permission
Level: "none".
In other words, unless you add permissions for someone else to access
someone's mailbox, is it secure?

Yes, but you have to make sure that you haven't inadvertently given those
other users admin permissions on your Exchange server.

Aloha,

-Ben-
Ben M. Schorr, OneNote-MVP
Roland Schorr & Tower
http://www.rolandschorr.com
Microsoft Outlook FAQ: http://www.factplace.com/outlook.htm

**I apologize but I am unable to respond to direct requests for assistance.
Please post questions and replies here in the newsgroup. Mahalo!

 

[RHS]

Ben, permissions are all set to Name: "Default" and Permissions: "None".

So can I safely assume that they even thought they may be able to add
someone elses mailbox of which they do not have permissions, once attached
they can't view any mail?

If that's the case then it is interesting that on the server an event gets
triggered referencing someone logging into someone elses mailbox of which
they are not the primary nt account holder.

 

[Ben M. Schorr - MVP]

Those are the permissions on the mailbox but on your Exchange server you may
have granted Admin permissions at a higher level that are being inherited
(without you knowing it) by the users. Easiest test is probably to just
look at one of those users machines (or add a mailbox yourself to your own)
and see what they can see.

By the way -- to answer your first question about how to keep people from
adding other users' mailbox here's what you need to do:

Have your CEO create an e-mail message, addressed to ALL, that says that
anybody who adds another user's mailbox to their Outlook profile without
permission, will be fired. Append that to your company policy manual and
make sure everybody signs off on it. Then follow-thru. As the wise Ed is
famed for saying: "There are seldom good technological solutions to
behavioral problems." If people are going to deliberately violate your
company computer security policy then they need to work someplace else.

Aloha,

-Ben-
Ben M. Schorr, OneNote-MVP
Roland Schorr & Tower
http://www.rolandschorr.com
Microsoft Outlook FAQ: http://www.factplace.com/outlook.htm

**I apologize but I am unable to respond to direct requests for assistance.
Please post questions and replies here in the newsgroup. Mahalo!