Mailbox Permissions

[davetherave100]

Hello
I have a very strange problem with my mailbox permissions.
We have just been setting up the users on our new domain and by chance when setting outlook up to look at the exchange server, we found that any user had the permissions to connect to any other mailbox. This was from the outlook setup page, where you enter exchange server name and mailbox.
Outlook then carries on and works ok.
So if i log on a jbloggs and set the oulook to use fsmith, i can then send a message to fsmith, and it appears straight back in my mailbox.
Nothing has really been altered from default apart from pointing users to a different GAL
Hope someone has some ideas!
Thanks

 

[davetherave100]

hi
just been looking
For some reason the group 'everyone' has read,change,take ownership,fullmailbox access...but are grayed out.
Ticking deny on these stops access to the specified mailbox as another user, but shoudl this setting be set higher up??...and where?
Thanks

 

[brontosaurus]

if it's greyed out, then yes, it's inheriting permissions from the parent. i don't know how you've got your AD structured so you'll need to do a bit of investigating. It may be easier to start at the top level and work your way down though...

 

[davetherave100]

Thanks for that.
I have just been looking again at the problem, and it seems that before a user uses the mailbox, the permissions are SELF read,full mailbox access, but then when the mailbox is first used ie setup with outlook, then we get a whole lot more permissions, and one of those puts the everyone group as read,change,takeownership, and full mailbox access.
I have looked higher up, and also in the permissions of the store but cant seem to see clearly where these inhereted permissions are coming from.
We are just building this new domain to replace our old one...on the old one permissions are ok ie everyone just to read access. I have built both and im not aware of any difference apart from that on the old domain, forestprep and domain prep were not run?
Any more ideas?
Thanks