none
Authenticated Users

    Question

  • Hi,

    I urgently need your help.

    We have exchange 2007 in our organization and some users have been able to open other users mailboxes in Outlook. We are on Windows Server 2003 domain. The problems seems to stem from authenticated users who have been given full access permission in all mailboxes. If the authenticated users group is removed from full access permission list in a particular mailbox the user of the mailbox cannot access it and keeps on being prompted for a username and password in Ms Outlook (We have 2007 and 2010 versions).

    Could the problem probably be caused by one of the Exchange Servers which is also a domain controller?

    The issue is getting out of hand because users can access classified data and information only meant for top management.

    Monday, February 20, 2012 10:28 AM

All replies

  • Hi,

    Try to check if a user have a full permission on his mailbox. Try to verify that each user is set as the owner of his mailbox.

    Best regards 


    Best Regards Don't forget to mark it as answer if it helps

    Monday, February 20, 2012 1:37 PM
  • By default, full permissions on a user mailbox should look like this (it reads "SELF" rather than the user name). 

    http://www.msexchange.org/img/upl/image0151196264671249.jpg

    Monday, February 20, 2012 2:06 PM
  • All user mailboxes have NT AUTHORITY\SELF and NT AUTHORITY\Authenticated Users groups granted full access permission. If I remove full access permission for NT AUTHORITY\Authenticated Users from a user mailbox, that partcular user cannot access his/her emails either via OWA or Outlook client.

    Tuesday, February 21, 2012 4:54 AM
  • Go to add - dsa.msc - enable advance feature on the view - select the particular user - go to the security tab and add the user to whom you want to provide accesss - select and give full control....

    Now it should work..:)


    Exchange Queries

    Tuesday, February 21, 2012 5:15 AM
  • Its not yet working...users continues to access other users' mailboxes.
    Tuesday, February 21, 2012 8:45 AM