I haven't been able to figure out how to keep employees from attaching
(adding) other employees mailboxes to their outlook. They do this through
Tools/EMail Accounts/View or change existing email accounts/Change/More
Settings/Advanced, etc...
One employee in particular has added the CEO and another employee's mailbox
to their Outlook. I could remove it easy enough but this employee could
easily add them back again. I could tell the CEO but then my job could be on
the line for allowing this security hole.
I want to prevent it in the first place. What kind of permissions on the
mailboxes should I set. They seem to default to name: "default", Permission
Level: "none".
How to I tighten this down?

Thanks,

Robert

I just want to add that if I add just that user to the permissions and remove
"default", it just adds "default" back in again.

This is for Outlook 2003.

RHS

"RHS" wrote:

I haven't been able to figure out how to keep employees from attaching
(adding) other employees mailboxes to their outlook. They do this through
Tools/EMail Accounts/View or change existing email accounts/Change/More
Settings/Advanced, etc...
One employee in particular has added the CEO and another employee's mailbox
to their Outlook. I could remove it easy enough but this employee could
easily add them back again. I could tell the CEO but then my job could be on
the line for allowing this security hole.
I want to prevent it in the first place. What kind of permissions on the
mailboxes should I set. They seem to default to name: "default", Permission
Level: "none".
How to I tighten this down?

Thanks,

Robert

You can't remove Default. It has to stay here. Set it to None.

It sounds, though, like folder permissions aren't the problem and that, instead, you need to check the client access and security permissions (2 different sets of permissions) in Active Directory.

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003
http://www.turtleflock.com/olconfig/index.htm
and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
http://www.outlookcode.com/jumpstart.aspx

"RHS" wrote in message ...
I just want to add that if I add just that user to the permissions and remove
"default", it just adds "default" back in again.

This is for Outlook 2003.

RHS

"RHS" wrote:

I haven't been able to figure out how to keep employees from attaching
(adding) other employees mailboxes to their outlook. They do this through
Tools/EMail Accounts/View or change existing email accounts/Change/More
Settings/Advanced, etc...
One employee in particular has added the CEO and another employee's mailbox
to their Outlook. I could remove it easy enough but this employee could
easily add them back again. I could tell the CEO but then my job could be on
the line for allowing this security hole.
I want to prevent it in the first place. What kind of permissions on the
mailboxes should I set. They seem to default to name: "default", Permission
Level: "none".
How to I tighten this down?

Thanks,

Robert

Thank you Sue.
I have tested logging in as another user, then attempting to attach to
another person't mailbox and although it will add the mailbox, you can't see
any of the mail so I think I'm ok. So I think that the events that are being
logged are attempted viewing of other's mailboxes, albeit unsuccessful.
I pretty certain that there isn't anything special set in Active Directory
that would allow for it.

thanks much,

rhs

"Sue Mosher [MVP-Outlook]" wrote:

You can't remove Default. It has to stay here. Set it to None.

It sounds, though, like folder permissions aren't the problem and that, instead, you need to check the client access and security permissions (2 different sets of permissions) in Active Directory.

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003
http://www.turtleflock.com/olconfig/index.htm
and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
http://www.outlookcode.com/jumpstart.aspx

"RHS" wrote in message ...
I just want to add that if I add just that user to the permissions and remove
"default", it just adds "default" back in again.

This is for Outlook 2003.

RHS

"RHS" wrote:

I haven't been able to figure out how to keep employees from attaching
(adding) other employees mailboxes to their outlook. They do this through
Tools/EMail Accounts/View or change existing email accounts/Change/More
Settings/Advanced, etc...
One employee in particular has added the CEO and another employee's mailbox
to their Outlook. I could remove it easy enough but this employee could
easily add them back again. I could tell the CEO but then my job could be on
the line for allowing this security hole.
I want to prevent it in the first place. What kind of permissions on the
mailboxes should I set. They seem to default to name: "default", Permission
Level: "none".
How to I tighten this down?

Thanks,

Robert