Wehave an Ex2003 environment with two main groups of users, group A and group B. What we want to do is by default deny access to anyone in group A from looking at the mailbox of anyone in group B. so if a user in group B goes and sets 'Default' access to his mailbox we don't wantany of the group A people to be able to access the mail. I've read the 'working with store permissions in ex2003' doc but that didn'thelp. any ideas where I should be looking ? thanks

Rich, By default, NO ONE should be able to access any mailbox except their own. If your users can access other mailboxes then something is seriously wrong with your permissions. Is this the case? Jim McBee

thanks for the reply Jim, The scenario we are trying to prevent iswhenuserJoein group Bgoes and right clicks his inbox and changes the'Default' permission from 'none' to say 'editor'. What we need is a deny for all group A users so they are not able to read mail in Joe's inbox, even though he just set the 'default' perms. If we can't get an overriding deny for group A users on group B mailboxes then we may have to resort to a scan/fix of all mailboxes and reset default perms to none on a daily basis. thanks again,

Hi, Why don't you add Group B in Joe's permission list and set it as "editor" and leave default alone? For more information: http://office.microsoft.com/en-us/outlook/CH010046031033.aspx Regards, Elvis