Forum Discussion

Andrews_Mike's avatar
Andrews_Mike
Level 3
9 years ago

User Permission

One of the user is able to see another user archived mails in archive explorer.

When we checked initially noticed that there was a group and had permission to view users mailbox and the permission was automatically assigend to Enterprise vault.

This group was deleted and under user permission in EV we can now see only SID details of the group but the user is still able to see the mailbox in the archive explorer.

I did a manual sync of the mailboxes and also used permission browser but unable to find any permission assigend.

Any suggessions to fix this problem.

 

Thanks

Andrews

 

Enterprise Vault
Information Governance
Windows Server (2003-2008)
  • AndrewB's avatar
    AndrewB
    9 years ago

    i see your screenshot and understand what you're saying. you can also check the box for folder hierachy and permissions, select the specific mailbox in question, and run a manual sync. but if that's not working then what i suggested was to go to the archive in the EV console, right click, properties, permissions tab. see if the user's name is in there that shouldn't have access, and check the deny box where it says "manually set"

  • AndrewB's avatar
    AndrewB
    Moderator
    9 years ago

    an immediate fix would be to go to the properties of the archive in EV and add a "deny" permission for the user who shouldn't have access

  • Andrew_F's avatar
    Andrew_F
    Level 3
    9 years ago

    Hello Andrews,

    Try to verify ( in outlook) the mailbox folders permissions.

    I had this problem in the past, in my case there was some exchange folders inside a mailbox with wrong permissions so other people were able to see them in archive explorer.

    Permissions from mailbox to Archive is managed by (see the attachment)

     

     

  • AndrewB's avatar
    AndrewB
    Moderator
    9 years ago

    i see your screenshot and understand what you're saying. you can also check the box for folder hierachy and permissions, select the specific mailbox in question, and run a manual sync. but if that's not working then what i suggested was to go to the archive in the EV console, right click, properties, permissions tab. see if the user's name is in there that shouldn't have access, and check the deny box where it says "manually set"