Video Screencast Help

Inherited permission cannot be removed from Vaults ?

Created: 11 Dec 2013 | 5 comments

How can I remove the inherited permission from the Archived Exchange server mailboxes ?

I need to tidy up the permission to only allow some AD security group to have access to the Vaulted items.

I'm using EV 9.0.4 and Exchange Server 2007 SP3

Thanks.

Operating Systems:

Comments 5 CommentsJump to latest comment

A_J's picture

Hi John,

If the permission are inhertied from Exchnage

You need to ZAP the permission on the Mailbox and then set Inherited permission to OFF in the Exchange Mailbox Policy.

Check the below article on how to Zap the permissions.

http://www.symantec.com/docs/TECH44818

 

John Santana's picture

ah, I see, so in this case if the permission was not given consistently in Exchange Server, then the EV Archived mailbox is also not consistent ?

by creating the EVPM script does that means I still have to manually set or remove the required permission from the Exchange Server ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

A_J's picture

Yes if you don't give permission on the Exchange Server or AD then those will get inherited in the Archives if Inherited permission is SET to ON in the Exchange Mailbox Policy.

Now as the permissions are already applied you need to Zap the Permission using the above article and then SET Inherited permission to OFF in the Exchange Mailbox Policy.

By which no permission will be syncronized with the Archives in EV..

Advisor's picture

That's partially true, once the inherited permissions on the mailbox are applied on Archive/Vaut, then they will stay until you zap the permissions using evpm script. And when next time you synchronize the mailbox from EV Server, it will fetch them back if you keep Inherited permissions turned on.

You still need to manually remove permissions from Exchange Server as EV will only change permissions of Archives and not the mailbox.

A_J's picture

Hello John,

 

Were the steps helpfull to achieve what you required ??