Inherited Exchange right in Archive

[sandrine_goetha]

Hello,

I would like to know if there is a way to stop this Inherited Rights from Exchange in Ev ?

We just migrated on EV11.0.1 CH1 and we are still on exchange 2010.

The problem is some of my users( lets call them userA) "played" around with the rights in their mailbox , now others( userB )see in the web  search  the archive of userA But is not able to see any item.

Best in my eyes would be to only allow user B to see archive from user B.

And the ones who need to see the archive of userA can ask ( after approuval from userA and/or our Security officer) me to give them acces via the VAC.

Thank you for your help

[Rob_Wilcox1]

The mailbox policy, Advanced tab, has an entry for 'Inherited Permissions'..  is that switched off?

[sandrine_goetha]

Thank you Rob for your answer.

Yes it is switch off

And I'm really sorry I wanted to speak about manual permissions and not inherited.

Thank you

Sandrine

[Rob_Wilcox1]

Lower down on that same list of setting: Synchronise Folder Permissions..  Think that's the one.

[sandrine_goetha]

Let me try to refrmulate my question for ecverybody to understand it.

I would like EV to DON'T synchronize Exchange rights except the owner ones, if somebody else needs to access the Archive it can be done at the VAC level.

EV11.0.1 CH + exchange 2010

[sandrine_goetha]

Thank you again Rob,

Somehow I missed you second post.

I just tried It and I'll tell you the effect tomorrow morning.

Regards

Sandrine

[sandrine_goetha]

Hello Rob,

just to keep you informed.

It works for the new archives but I still see the old archives I saw before ,somehow those rights are not removed.

Thank you anyway.

Sandrine

[Rob_Wilcox1]

Glad to help. I don't know of a way to remove the existing ones.

[GertjanA]

Hi Sandrine,

We had (sort of) the same situation. I did the following:

use the zapping mechanism to zap all permissions from the archives affected. This will also zap the owner permission!

When done, synchronize the mailboxes manually, with the 'include permissions' option checked. (open task properties, sync tab, select "Folder hierarchy and permission", click Synchronize

When synced, permissions should be set again correctly.