users can delete public folder calendar entries without permission
in [Microsoft Exchange]
|
Prev: About 6 messages stuck in one of our outgoing smtp queues
Next: Exchange 2003 - OWA - Japanese - weird issue
From: shrpshtr on 15 Mar 2010 20:23 why would a user be able to delete a calender entry in exchange 2003 (Active Directory) public folder with permissions on that folder set to none in the delete section? any help would be greatly appreciated. shrp
From: Rich Matheisen [MVP] on 15 Mar 2010 21:11 On Mon, 15 Mar 2010 17:23:15 -0700 (PDT), shrpshtr <shrpshtr(a)gmail.com> wrote: >why would a user be able to delete a calender entry in exchange 2003 >(Active Directory) public folder with permissions on that folder set >to none in the delete section? any help would be greatly appreciated. The short answer is that they wouldn't be able to do that. --- Rich Matheisen MCSE+I, Exchange MVP
From: Leonid S. Knyshov // SBS Expert on 16 Mar 2010 03:19 On 3/15/2010 5:23 PM, shrpshtr wrote: > why would a user be able to delete a calender entry in exchange 2003 > (Active Directory) public folder with permissions on that folder set > to none in the delete section? any help would be greatly appreciated. > > shrp Deny permissions override Allow. Both permissions can be inherited. If there is Allow permission upstream and you don't have a corresponding Deny setting, then the Allowed user can delete. -- Leonid S. Knyshov Crashproof Solutions 510-282-1008 Twitter: @wiseleo http://crashproofsolutions.com Microsoft Small Business Specialist Try Exchange Online http://bit.ly/free-exchange-trial Please vote "helpful" if I helped you :)
From: shrpshtr on 16 Mar 2010 09:30
On Mar 16, 3:19 am, "Leonid S. Knyshov // SBS Expert" <LeonidSKnyshovSBSExp...(a)discussions.microsoft.com> wrote: > On 3/15/2010 5:23 PM, shrpshtr wrote:> why would a user be able to delete a calender entry in exchange 2003 > > (Active Directory) public folder with permissions on that folder set > > to none in the delete section? any help would be greatly appreciated.. > > > shrp > > Deny permissions override Allow. Both permissions can be inherited. > > If there is Allow permission upstream and you don't have a corresponding > Deny setting, then the Allowed user can delete. > -- > Leonid S. Knyshov > Crashproof Solutions > 510-282-1008 > Twitter: @wiseleohttp://crashproofsolutions.com > Microsoft Small Business Specialist > Try Exchange Onlinehttp://bit.ly/free-exchange-trial > Please vote "helpful" if I helped you :) I've looked under ESM and can't find anywhere that permissions are allowing this to occur. Is there anywhere else I need to check? To Rich - I know they "won't" be able to do this but they can, and are. |