Forum Discussion

Jakob's avatar
Jakob
Level 5
8 years ago

Limit access to Exchange Archvies to owner

Hi,

is there the possibility to limit the access to all Exchange Archives to the Mailbox-owner (+ if needed addidtional EV Archive Permissions).

Via policy there is the option to disable inherited permissions and disable folder permission sync. I need the option to disable the regular mailbox permission sync.

Via EVPM i  have the possiblility to edit the rights of an archive once - but we wan´t to have this regulary - also for new archives?

The backgound is that the customer uses EV to dissolve pst files. But the users were used to the pst files and also use them to hold some confidential informations etc.. That´s why they expect the vault to behave like an pst file so that only themselves have access to the pst file. They don´t want to solve it by modifiing exchange or mailbox folder permissions.

  • CConsult's avatar
    CConsult
    Moderator
    8 years ago

    Hi,

    do I understand you correctly?

    You want to not have specific users have access to the archive?

    Archive permissions are set in Archive Permissions (Read, Write, Delete)

    You can use EVPM to set those rights, as far as I remember even on Foldernames.

    Everyone that isnt in the permission will not have access to the archive.

    (Aslong as they dont grant the rights themself) >> Auditting

    • Jakob's avatar
      Jakob
      Level 5
      8 years ago

      Hi CConsult,

      only the owner of an exchange mailbox should have access to the archive. All Other users which have Full Access to the Exchange Mailbox shouldn´t have access to the archive.

      I don´t think that EVPM is theright tool for this. The problem is that also new autmatically created archives should have this limited access.

      Jakob

      • GertjanA's avatar
        GertjanA
        Moderator
        8 years ago

        Hello Jakob,

        I find it strange that you need to deny access to archives to people who have full access to the mailbox, but stranger requests have been seen :-)

        I believe you can sort of do this in the mailbox policy, but it might be that (since the Exchange permissions are synced), users with full access get permissions on the archive anyway.

        Synchronize Folder Permissions - set to OFF

        Obviously, Include default and anonymous and Inherited permissions also need to be Off