We're running Exchange 2003 with Outlook 2003 as the client. Today I realized that any user can click on "Open a shared calendar" in their own Outlook and view ANY other user's calendar (complete with the actual appointments, notes, etc.). This is definitely NOT something that we ever configured intentionally.... but I'm at a loss for disabling it. When checking various users' calendar folder permissions, I have confirmed that they only have the standard "default" and "anonymous" both set to "none" (obviously the most restrictive permission). No one has been given explicit permission to view calendars. We're running Outlook in cached mode to support our Symantec spam filtering, but from what I've read elsewhere I can't find anything conclusive about whether this might cause the issue or not.

Hi,Try downloading pfdavadmin and look at the calendar permissions with this tool. It might help (and you can use the tool to set the desired permissions as well.Leif

Please check from Store level to see these users are not part of ant Security Group who has rights to access any one's calendar/inbox etc etc.Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Hi,First you can try the Leif's suggestions to confirm the permission is configured correctly.The PFDAVAdmin tool can be downloaded from the following site:http://www.microsoft.com/downloads/details.aspx?FamilyID=635be792-d8ad-49e3-ada4-e2422c0ab424&DisplayLang=en1. Launch the PFDAVAdmin and locateone of theCalendar folder2. Right click the Calendar folder and click Folder permissionsIf that's fine, please check the permission on the mailbox store.1, Open ESM, locate mailbox store, right click and select Properties, in the Security tab, check whether any user was given the Full control permission.ThanksAllen

Thanks guys, it turned out that the Authenticated Users group had full control, set at the server level, so it passed down to all of the mailboxes. No clue how/where/when that happened, but once we cleared it, we're back to normal. Leif, the PFDAVAdmin tool was very useful and I'm glad to know that it's available for doing ongoing maintenance too.