April 11th, 2005, 22:50 PM
Succeded in braking Windo
[TIP] Grant a single account access to all mailboxes
Well, since there are some tips that are mainly for Network Administration I decided to post them in this section. If you guys think they are usefull I can post more, if not, well this is it
One of the security enhancements in Exchange Server 2000/2003 is the absence of an all-powerful service account. This makes it easier to audit for unauthorized access, as well as making user data more secure.
However, there are times when you need to assign a single account the right to access all mailboxes. For example, a brick-level backup programís service account typically requires access to the mailboxes it protects. Exmerge, often used in recovery scenarios, also requires mailbox access.
While you can open each mailbox individually and add the appropriate account permissions, that task is very time-consuming. In cases where an account must access all mailboxes to perform a legitimate task, simply add the account to the organizationís security properties with the appropriate permissions. Here's how:
1. Open the Exchange System Manager.
2. Right-click on the Organization object in the left pane, and then select Properties.
3. Click the Security tab.
4. Under Group Or User Names, click the Add button.
5. Enter the account that needs access to the mailboxes.
6. Click OK to close the Select Users, Computers, Or Groups dialog box.
7. Select the appropriate permissions check boxes in the Permissions For pane. (Remember, it is a best practice to assign the minimum permissions needed to do the job.)
8. Click OK to close the dialog box.
Mailboxes in all of the organizationís stores will inherit the account permissions you just added.