locked
Inherited "Full Access" and "Send as" Permissions on new accounts - where is this being set from? RRS feed

  • Question

  • Hello

    For newly created accounts there are a list of mailboxes that have "Full access" and "Send as" permissions automatically set.  Some of these are correct but I have some legacy accounts in the list that I want to remove.

    Currently I remove these right after the account is set-up but would like to find the source of the inherited "Full Access" Permissions and "Send as" and remove from there so they do not apply to newly created mailboxes.

    Seems like a simple thing but I just cannot figure out where these permissions are inheriting from.

    Thanks!


    Friday, October 26, 2012 11:03 AM

Answers

  • Sometimes the easiest thing is to open up adsiedit, drill down to the mailbox store level under the Configuration Container, check the permissions and walk up the tree to the ORG level object until you find where they are set.
    • Marked as answer by dazzerb Friday, October 26, 2012 11:53 AM
    Friday, October 26, 2012 11:07 AM

All replies

  • Sometimes the easiest thing is to open up adsiedit, drill down to the mailbox store level under the Configuration Container, check the permissions and walk up the tree to the ORG level object until you find where they are set.
    • Marked as answer by dazzerb Friday, October 26, 2012 11:53 AM
    Friday, October 26, 2012 11:07 AM
  • Andy - you rock!  That was it.  The account had full control set at:

    ADSI Edit/Configuration/CN=Configuration/CN= Services/CN=Microsoft Exchange.

    I removed and it is no longer applying to new mailboxes.  

    Thanks so much!

    Friday, October 26, 2012 11:57 AM