if a user opens another user's calendar for which he has been given delegate
rights and exports the calendar folder in Outlook 2003, private entries are
visible in the exported calendar file. This problem is considered to be a
security risk by a customer of mine.
Is there a solution for this problem? e.g. preventing the user from
exporting the calendar folder through policies??

thanks for your help.

No, and no. Did the folder owner grant the delegate access to private items?
--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003
http://www.turtleflock.com/olconfig/index.htm
and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
http://www.outlookcode.com/jumpstart.aspx

"evee1" wrote in message ...
if a user opens another user's calendar for which he has been given delegate
rights and exports the calendar folder in Outlook 2003, private entries are
visible in the exported calendar file. This problem is considered to be a
security risk by a customer of mine.
Is there a solution for this problem? e.g. preventing the user from
exporting the calendar folder through policies??

thanks for your help.

Hi Sue, thanks for replying to my post. Let me be more specific:

1. User A (folder owner) grants reviewer permissions (read access) on all
folders of his mailbox for user B

2. in OL2003 user B opens user A's mailbox; when she opens user A's calendar
she can read all the calendar entries except those which have been marked
private by
user A as it should be

3. in OL2003 user B exports user A's mailbox and saves it as a *.pst file.
When she opens the exported *.pst file also the private entries in user A's
calendar are visible and can be read by user B

Why is that? And is there a way to avoid it.

Thanks and kind regards,
Eveline

"Sue Mosher [MVP-Outlook]" wrote:

No, and no. Did the folder owner grant the delegate access to private items?
--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003
http://www.turtleflock.com/olconfig/index.htm
and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
http://www.outlookcode.com/jumpstart.aspx

"evee1" wrote in message ...
if a user opens another user's calendar for which he has been given delegate
rights and exports the calendar folder in Outlook 2003, private entries are
visible in the exported calendar file. This problem is considered to be a
security risk by a customer of mine.
Is there a solution for this problem? e.g. preventing the user from
exporting the calendar folder through policies??

thanks for your help.

Looks like you've found an interesting bug. It's fixed in Outlook 2007.

Maybe the delegate doesn't need access to the entire mailbox? If the user can only open the calendar with the File | Open | Other User's Folder command, they won't be able to export that folder.

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003
http://www.turtleflock.com/olconfig/index.htm
and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
http://www.outlookcode.com/jumpstart.aspx

"evee1" wrote in message ...
Hi Sue, thanks for replying to my post. Let me be more specific:

1. User A (folder owner) grants reviewer permissions (read access) on all
folders of his mailbox for user B

2. in OL2003 user B opens user A's mailbox; when she opens user A's calendar
she can read all the calendar entries except those which have been marked
private by
user A as it should be

3. in OL2003 user B exports user A's mailbox and saves it as a *.pst file.
When she opens the exported *.pst file also the private entries in user A's
calendar are visible and can be read by user B

Why is that? And is there a way to avoid it.

Thanks and kind regards,
Eveline

"Sue Mosher [MVP-Outlook]" wrote:

No, and no. Did the folder owner grant the delegate access to private items?

"evee1" wrote in message ...
if a user opens another user's calendar for which he has been given delegate
rights and exports the calendar folder in Outlook 2003, private entries are
visible in the exported calendar file. This problem is considered to be a
security risk by a customer of mine.
Is there a solution for this problem? e.g. preventing the user from
exporting the calendar folder through policies??

thanks for your help.

thank you very much for that clear statement.
I will test OL2007.
The workaround you mentioned seems a possible solution to me.
I informed my customer and he is quite satisfied with this.

kind regards,
Eveline

"Sue Mosher [MVP-Outlook]" wrote:

Looks like you've found an interesting bug. It's fixed in Outlook 2007.

Maybe the delegate doesn't need access to the entire mailbox? If the user can only open the calendar with the File | Open | Other User's Folder command, they won't be able to export that folder.

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003
http://www.turtleflock.com/olconfig/index.htm
and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
http://www.outlookcode.com/jumpstart.aspx

"evee1" wrote in message ...
Hi Sue, thanks for replying to my post. Let me be more specific:

1. User A (folder owner) grants reviewer permissions (read access) on all
folders of his mailbox for user B

2. in OL2003 user B opens user A's mailbox; when she opens user A's calendar
she can read all the calendar entries except those which have been marked
private by
user A as it should be

3. in OL2003 user B exports user A's mailbox and saves it as a *.pst file.
When she opens the exported *.pst file also the private entries in user A's
calendar are visible and can be read by user B

Why is that? And is there a way to avoid it.

Thanks and kind regards,
Eveline

"Sue Mosher [MVP-Outlook]" wrote:

No, and no. Did the folder owner grant the delegate access to private items?

"evee1" wrote in message ...
if a user opens another user's calendar for which he has been given delegate
rights and exports the calendar folder in Outlook 2003, private entries are
visible in the exported calendar file. This problem is considered to be a
security risk by a customer of mine.
Is there a solution for this problem? e.g. preventing the user from
exporting the calendar folder through policies??

thanks for your help.