We have a Exchange Server 2007 and running Outlook 2007 on the workstations with several resource mailboxes set as rooms. These rooms were created in our 2k3 enviroment and converted into a room mailbox during our conversion. When our users submit a request for a meeting and filling out the information etc it declines everyone except 4 people which it should....However when our users scroll through the calendar view of the resource we are trying to lock down and do a "Direct Booking" by clicking on the time and try to book it ANYONE can book the resource. I have included the settings for the resource and I'm stuck please help I want to LOCK DOWN the permission so only those 4 people can book this resource. Thank You in advance for any help is appreciated.AutomateProcessing : AutoAcceptAllowConflicts : FalseBookingWindowInDays : 720MaximumDurationInMinutes : 10000AllowRecurringMeetings : TrueEnforceSchedulingHorizon : TrueScheduleOnlyDuringWorkHours : FalseConflictPercentageAllowed : 0MaximumConflictInstances : 0ForwardRequestsToDelegates : TrueDeleteAttachments : FalseDeleteComments : FalseRemovePrivateProperty : FalseDeleteSubject : FalseDisableReminders : TrueAddOrganizerToSubject : TrueDeleteNonCalendarItems : FalseTentativePendingApproval : FalseEnableResponseDetails : TrueOrganizerInfo : TrueResourceDelegates : {}RequestOutOfPolicy :AllRequestOutOfPolicy : FalseBookInPolicy : {Lisa Baldwin, Teresa Gevens, StephAllBookInPolicy : FalseRequestInPolicy :AllRequestInPolicy : TrueAddAdditionalResponse : FalseAdditionalResponse : <DIV><FONT size=2 face=Tahoma></FONRemoveOldMeetingMessages : TrueAddNewRequestsTentatively : TrueProcessExternalMeetingMessages : FalseDefaultReminderTime : 15RemoveForwardedMeetingNotifications : FalseIdentity : dakotacare.com/Resources/Board Room

You've correctly locked down the autoaccept behavior of the room, but left the permissions of the calendar open to writes from all users.

You've correctly locked down the autoaccept behavior of the room, but left the permissions of the calendar open to writes from all users. A resource mailbox should normally be configured with read only rights for /all/ users.

Which option are you talking about....If it's the Book In Policy those are the names of the user I want to have access to book the meeting.

What option are you talking about? If you are talking about the Book In Policy those are the users who I want to have access to the Direct Booking of this room.