How to Change the Share Permissions on the Message Tracking Share in Exchange 5.5 and in Exchange 2000 (825222)

SUMMARY

By default, when you install Microsoft Exchange Server 5.5 or Microsoft Exchange 2000 Server, a tracking log folder is created, and the Everyone group is given the Read share permission to the folder. The tracking log folder contains the message tracking log for all messages that are sent and received on the Exchange Server computer when message tracking is enabled.

Depending on your network requirements, you may want to prevent unauthorized users from viewing the Exchange Server computer's tracking log. For example, if you track messages and include the subject of the message in the tracking log, you may want to prevent unauthorized users from viewing this information. As an administrator, you can remove the Everyone group from the share permission of the tracking log folder, and you can add a new security group that only contains the users who require access to the message tracking logs.

MORE INFORMATION

To remove the Everyone group from the share permissions of the tracking log folder, and to add a new group that contains only the users who you want to have access to the tracking log folder, follow these steps:

Create a security group that contains the users who you want to have access to the tracking log folder.

Note For Exchange 5.5, the Exchange service account must have access to the message tracking logs in the tracking log folder.
Log on to the computer that runs Exchange 5.5 or Exchange 2000 by using an administrator account.
Locate and right-click the tracking log folder, and then click Properties.
- For Exchange 5.5:
  
  By default, the tracking log folder Tracking.log is created on the Exchange 5.5 computer in the following location:
  Drive:\Exchsrvr\Tracking.log
- For Exchange 2000:
  
  By default, the tracking log folder Exchange Server Computer Name.log is created on the Exchange 2000 computer in the following location:
  Drive:\Program Files\Exchsrvr\Exchange Server Computer Name.log
Note When Exchange 5.5 or Exchange 2000 is installed in a cluster environment, the tracking log is located on the shared disk for the Exchange resource group. In this scenario, the tracking log is named Exchange Virtual Server Name.log.
On the Sharing tab, click Permissions.
In the Name box, click Everyone, and then click Remove.
Click Add, click the new group that you created (the group that contains the user accounts that you want to have access to the share), click Add, and then click OK.
Click the new group that you added, and then verify that the new group has Read permission under Permissions.
Click Apply, and then click OK.

REFERENCES

For additional information about how to share files and folders over a network in Windows 2000, click the following article number to view the article in the Microsoft Knowledge Base:

301198 HOW TO: Share Files and Folders Over a Network (Domain) in Windows 2000

For additional information about how to enable message tracking in Exchange 2000 Server, click the following article number to view the article in the Microsoft Knowledge Base:

246856 XADM: How to Enable Message Tracking in Exchange 2000 Server

For additional information about the Exchange 2000 Server tracking log, click the following article number to view the article in the Microsoft Knowledge Base:

246867 XADM: Tracking Log and Queue Viewer Allow Access to Message Subject