Exchange Server 2007 - Default Mailbox Permission

All replies

• 

  

  0

  Sign in to vote

  The following have Full Access Permission:

  DOMAIN\Exchange Servers

  DOMAIN\Exchange Trusted Subsystem

  NT AUTHORITY\SELF

  NT AUTHORITY\SYSTEM

  ---

  Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

  Monday, July 4, 2011 11:55 PM
• 

  

  0

  Sign in to vote

  Hi Irineu,

   

  This is mailbox permission in Exchange 2007 SP3 (I tested in my lab, created a new mailbox, use get-mailboxpermission to check the permission of the new mailbox):

   

  User                                                                      AccessRights

  ----                                                                       ------------

  NT AUTHORITY\SELF                                              {FullAccess, ReadPermission}

  TEST\VJIA2275631$                                              {ReadPermission}

  TEST\Exchange Servers                                         {FullAccess}

  TEST\Domain Admins                                             {FullAccess}

  TEST\Enterprise Admins                                         {FullAccess}

  TEST\Exchange Organization Administrators             {FullAccess}

  TEST\Administrator                                                {FullAccess}

  TEST\Exchange Servers                                         {FullAccess}

  TEST\Exchange Public Folder Administrators            {ReadPermission}

  NT AUTHORITY\NETWORK SERVICE                        {ReadPermission}

  TEST\Exchange Servers                                        {ReadPermission}

  TEST\Exchange View-Only Administrators               {ReadPermission}

  TEST\Exchange Organization Administrators            {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}

  TEST\Administrator                                               {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}

  TEST\Enterprise Admins                                        {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}

  TEST\Domain Admins                                            {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}

   

  Thanks,

   

  Evan Liu

   

  TechNet Subscriber Support in forum

  If you have any feedback on our support, please contact tngfb@microsoft.com  

  ---

  Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  Tuesday, July 5, 2011 5:20 AM

  Moderator
• 

  

  0

  Sign in to vote

  Yes, but which of those are inherited?

  ---

  Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

  Wednesday, July 6, 2011 3:41 AM
• 

  

  0

  Sign in to vote

  This is the whole result:

   

  Identity             User                 AccessRights                    IsInherited  Deny

  --------             ----                 ------------                          -----------    ----

  test.com/Users/gt    NT AUTHORITY\SELF    {FullAccess, Rea... False       False

  test.com/Users/gt    TEST\VJIA2275631$    {ReadPermission}    True        False

  test.com/Users/gt    TEST\Exchange Ser... {FullAccess}        True        True

  test.com/Users/gt    TEST\Domain Admins   {FullAccess}        True        True

  test.com/Users/gt    TEST\Enterprise A... {FullAccess}        True        True

  test.com/Users/gt    TEST\Exchange Org... {FullAccess}        True        True

  test.com/Users/gt    TEST\Administrator   {FullAccess}        True        True

  test.com/Users/gt    TEST\Exchange Ser... {FullAccess}        True        False

  test.com/Users/gt    TEST\Exchange Pub... {ReadPermission}    True        False

  test.com/Users/gt    NT AUTHORITY\NETW... {ReadPermission}    True        False

  test.com/Users/gt    TEST\Exchange Ser... {ReadPermission}    True        False

  test.com/Users/gt    TEST\Exchange Vie... {ReadPermission}    True        False

  test.com/Users/gt    TEST\Exchange Org... {FullAccess, Del... True        False

  test.com/Users/gt    TEST\Administrator   {FullAccess, Del... True        False

  test.com/Users/gt    TEST\Enterprise A... {FullAccess, Del... True        False

  test.com/Users/gt    TEST\Domain Admins   {FullAccess, Del... True        False

   

  Thanks,

   

  Evan Liu

   

  TechNet Subscriber Support in forum

  If you have any feedback on our support, please contact tngfb@microsoft.com  

  ---

  Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Marked as answer by Evan LiuModerator Sunday, July 17, 2011 8:03 AM

  Wednesday, July 6, 2011 6:05 AM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Irineu,

   

  How about the issue, any updates?

   

  Thanks,

   

  Evan Liu

   

  TechNet Subscriber Support in forum

  If you have any feedback on our support, please contact tngfb@microsoft.com  

  Sunday, July 17, 2011 3:06 AM

  Moderator