locked
Exchange Server 2007 - Default Mailbox Permission RRS feed

  • Question

  • Hello,

    When I install an exchange server 2007, what is the default permission for the mailboxes.
    I had a problem and need to reset the permissions for the default installation.

    Thanks In Advanced,

    Monday, July 4, 2011 6:42 PM

Answers

  • This is the whole result:

     

    Identity             User                 AccessRights                    IsInherited  Deny

    --------             ----                 ------------                          -----------    ----

    test.com/Users/gt    NT AUTHORITY\SELF    {FullAccess, Rea... False       False

    test.com/Users/gt    TEST\VJIA2275631$    {ReadPermission}    True        False

    test.com/Users/gt    TEST\Exchange Ser... {FullAccess}        True        True

    test.com/Users/gt    TEST\Domain Admins   {FullAccess}        True        True

    test.com/Users/gt    TEST\Enterprise A... {FullAccess}        True        True

    test.com/Users/gt    TEST\Exchange Org... {FullAccess}        True        True

    test.com/Users/gt    TEST\Administrator   {FullAccess}        True        True

    test.com/Users/gt    TEST\Exchange Ser... {FullAccess}        True        False

    test.com/Users/gt    TEST\Exchange Pub... {ReadPermission}    True        False

    test.com/Users/gt    NT AUTHORITY\NETW... {ReadPermission}    True        False

    test.com/Users/gt    TEST\Exchange Ser... {ReadPermission}    True        False

    test.com/Users/gt    TEST\Exchange Vie... {ReadPermission}    True        False

    test.com/Users/gt    TEST\Exchange Org... {FullAccess, Del... True        False

    test.com/Users/gt    TEST\Administrator   {FullAccess, Del... True        False

    test.com/Users/gt    TEST\Enterprise A... {FullAccess, Del... True        False

    test.com/Users/gt    TEST\Domain Admins   {FullAccess, Del... True        False

     

    Thanks,

     

    Evan Liu

     

    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com  


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Wednesday, July 6, 2011 6:05 AM
    Moderator

All replies

  • The following have Full Access Permission:

    DOMAIN\Exchange Servers

    DOMAIN\Exchange Trusted Subsystem

    NT AUTHORITY\SELF

    NT AUTHORITY\SYSTEM


    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Monday, July 4, 2011 11:55 PM
  • Hi Irineu,

     

    This is mailbox permission in Exchange 2007 SP3 (I tested in my lab, created a new mailbox, use get-mailboxpermission to check the permission of the new mailbox):

     

    User                                                                      AccessRights

    ----                                                                       ------------

    NT AUTHORITY\SELF                                              {FullAccess, ReadPermission}

    TEST\VJIA2275631$                                              {ReadPermission}

    TEST\Exchange Servers                                         {FullAccess}

    TEST\Domain Admins                                             {FullAccess}

    TEST\Enterprise Admins                                         {FullAccess}

    TEST\Exchange Organization Administrators             {FullAccess}

    TEST\Administrator                                                {FullAccess}

    TEST\Exchange Servers                                         {FullAccess}

    TEST\Exchange Public Folder Administrators            {ReadPermission}

    NT AUTHORITY\NETWORK SERVICE                        {ReadPermission}

    TEST\Exchange Servers                                        {ReadPermission}

    TEST\Exchange View-Only Administrators               {ReadPermission}

    TEST\Exchange Organization Administrators            {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}

    TEST\Administrator                                               {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}

    TEST\Enterprise Admins                                        {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}

    TEST\Domain Admins                                            {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}

     

    Thanks,

     

    Evan Liu

     

    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com  


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, July 5, 2011 5:20 AM
    Moderator
  • Yes, but which of those are inherited?
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Wednesday, July 6, 2011 3:41 AM
  • This is the whole result:

     

    Identity             User                 AccessRights                    IsInherited  Deny

    --------             ----                 ------------                          -----------    ----

    test.com/Users/gt    NT AUTHORITY\SELF    {FullAccess, Rea... False       False

    test.com/Users/gt    TEST\VJIA2275631$    {ReadPermission}    True        False

    test.com/Users/gt    TEST\Exchange Ser... {FullAccess}        True        True

    test.com/Users/gt    TEST\Domain Admins   {FullAccess}        True        True

    test.com/Users/gt    TEST\Enterprise A... {FullAccess}        True        True

    test.com/Users/gt    TEST\Exchange Org... {FullAccess}        True        True

    test.com/Users/gt    TEST\Administrator   {FullAccess}        True        True

    test.com/Users/gt    TEST\Exchange Ser... {FullAccess}        True        False

    test.com/Users/gt    TEST\Exchange Pub... {ReadPermission}    True        False

    test.com/Users/gt    NT AUTHORITY\NETW... {ReadPermission}    True        False

    test.com/Users/gt    TEST\Exchange Ser... {ReadPermission}    True        False

    test.com/Users/gt    TEST\Exchange Vie... {ReadPermission}    True        False

    test.com/Users/gt    TEST\Exchange Org... {FullAccess, Del... True        False

    test.com/Users/gt    TEST\Administrator   {FullAccess, Del... True        False

    test.com/Users/gt    TEST\Enterprise A... {FullAccess, Del... True        False

    test.com/Users/gt    TEST\Domain Admins   {FullAccess, Del... True        False

     

    Thanks,

     

    Evan Liu

     

    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com  


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Wednesday, July 6, 2011 6:05 AM
    Moderator
  • Hi Irineu,

     

    How about the issue, any updates?

     

    Thanks,

     

    Evan Liu

     

    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com  

    Sunday, July 17, 2011 3:06 AM
    Moderator