How to restrict administrator from vieweing emails
Hi, Is there a way to restrict exchange administrators from vieweing emails via the 'Queue Viewer' or via granting rights to a mailbox. If restriction of rights is not possible, are there any audit events that can be observed to keep a check on such an event. Any help in this regard will be really helpful. Regards, Sunil
December 12th, 2010 6:06am

Take away their rights to login to the server? Queue viewer will only show you the minimum of the message, it doesn't show the full message. You can enable auditing for changes to the mailbox rights, but as you have completely failed to provide any version information, further advice isn't possible. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources
Free Windows Admin Tool Kit Click here and download it now
December 12th, 2010 8:30am

Hi Simon, My bad , I did not provide any infomration. My environment is an exchange 2007 environment. I understand that queue viewer has limited message viweing, but is there a way to prevent that? Is auditing changes the only way of keep tracking changes of when the admin grants rights to another users mailbox. Is there a way to prevent such a change from happening all together? Regards, Jakson Regards, Brent Jakson
December 19th, 2010 10:29am

Fire your administrators and hire some that you trust? Ultimately someone has to to have keys to the network, which means being able to change permissions, even in their own favour. If you don't trust your administrators to not do that, then get new administrators. You can't lock them out, auditing is the only thing possible that can catch someone who makes the changes. If you don't want someone looking at queue viewer, then take away their permissions. That is your only choice. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources
Free Windows Admin Tool Kit Click here and download it now
December 19th, 2010 1:02pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics