XADM: Exchange 2000 Users Have Full Mailbox Access to the Mailboxes of Other Users (328670)

RESOLUTION

To resolve this issue, you must review the permissions assigned to the Everyone group in the Exchange System Manager to determine whether the Everyone group has been assigned Receive As or Send As permissions. Also verify that any other users or groups assigned these permissions actually need them. To do this, follow these steps.

NOTE: Some objects in Exchange System Manager may not display the Security tab by default, and therefore you cannot review the permissions associated with those objects. Before you follow these steps, make sure that the Security tab has been made available in Exchange System Manager.

For additional information about how to make the Security tab available on all objects, click the following article number to view the article in the Microsoft Knowledge Base:

1. Click Start, point to Programs, point to Microsoft Exchange, and then click System Manager.
2. In Exchange System Manager, click Servers, and then double-click your Exchange server in the right pane.
3. In the left pane, click First Storage Group.
4. Right-click Mailbox Store, and then click Properties.
5. Click Security, and then verify that the Receive As and Send As permissions have been assigned correctly. Make sure that they have not been incorrectly assigned to users or groups, such as the Everyone group or the Domain Users group. If the Receive As or Send As permissions have been assigned incorrectly, click to clear their respective check boxes, and then click OK.
6. Move up the hierarchy in Exchange System Manager, repeating step 5 for the following objects:
   • First Storage Group
   • Your Exchange Server
   • Your Exchange Organization
7. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
8. In the left pane, click Users.
9. In the right pane, right-click a user account that has an Exchange mailbox, and then click Properties.
10. Click the Exchange Advanced tab, and then click Mailbox Rights.
11. Verify that any users or groups listed as having Full mailbox access permissions are correctly assigned.
    
    NOTE: If any users or groups, such as Everyone or Domain Users, are still listed as having Full mailbox access permissions, return to step 5 and verify that the Receive As or the Send As permissions have not been incorrectly assigned.
12. Click OK two times.