Security in Outlook

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

RHS - 14 Mar 2006 19:16 GMT

I haven't been able to figure out how to keep employees from attaching
(adding) other employees mailboxes to their outlook. They do this through
Tools/EMail Accounts/View or change existing email accounts/Change/More
Settings/Advanced, etc...
One employee in particular has added the CEO and another employee's mailbox
to their Outlook. I could remove it easy enough but this employee could
easily add them back again. I could tell the CEO but then my job could be on
the line for allowing this security hole.
I want to prevent it in the first place. What kind of permissions on the
mailboxes should I set. They seem to default to name: "default", Permission
Level: "none".
How to I tighten this down?

Thanks,

Robert

Reply to this Message

RHS - 14 Mar 2006 19:24 GMT

I just want to add that if I add just that user to the permissions and remove
"default", it just adds "default" back in again.

This is for Outlook 2003.

RHS

> I haven't been able to figure out how to keep employees from attaching
> (adding) other employees mailboxes to their outlook. They do this through
[quoted text clipped - 12 lines]
>
> Robert

Reply to this Message

Sue Mosher [MVP-Outlook] - 06 Apr 2006 20:59 GMT

You can't remove Default. It has to stay here. Set it to None.

It sounds, though, like folder permissions aren't the problem and that, instead, you need to check the client access and security permissions (2 different sets of permissions) in Active Directory.

Signature

Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003
http://www.turtleflock.com/olconfig/index.htm
and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
http://www.outlookcode.com/jumpstart.aspx

>I just want to add that if I add just that user to the permissions and remove
> "default", it just adds "default" back in again.
[quoted text clipped - 19 lines]
>>
>> Robert

Reply to this Message

RHS - 07 Apr 2006 14:06 GMT

Thank you Sue.
I have tested logging in as another user, then attempting to attach to
another person't mailbox and although it will add the mailbox, you can't see
any of the mail so I think I'm ok. So I think that the events that are being
logged are attempted viewing of other's mailboxes, albeit unsuccessful.
I pretty certain that there isn't anything special set in Active Directory
that would allow for it.

thanks much,

rhs

> You can't remove Default. It has to stay here. Set it to None.
>
[quoted text clipped - 23 lines]
> >>
> >> Robert

Reply to this Message