PermisionsOnExchange2003.docVIP

Working with Store Permissions in Microsoft Exchange 2000 Server and Exchange Server 2003 ? ? Microsoft Corporation Published: December 12, 2006 Author: Exchange Server Documentation Team ? ? ? ? ? ? ? Abstract This document explains the process by which Exchange 2000 Server and Exchange Server 2003 uses permissions to control access to objects in the Exchange store (public folder databases and mailbox databases). Comments? Send feedback to exchdocs@.  Contents Working with Store Permissions in Exchange 2000 and 2003 5 Introduction to Working with Store Permissions in Exchange 2000 and 2003 5 What Will You Learn from This Guide? 5 Who Should Read This Guide? 6 What Terminology Is Used in This Guide? 6 Background 7 Accessing Exchange Objects 9 Opening a Folder or a Message in a User Mailbox 10 Opening a Public Folder or a Public Folder Message 11 Details of the Exchange Access Control Process 13 Performing Preliminary Checks 14 Determining the Type of User 14 Determining the Type of Client Application 14 Anatomy of Object-Level Access Control 15 Security Descriptors 15 ACLs and ACEs 16 ACE Sequences in the ACL 17 Default ACLs for Messages 21 Special Considerations for Coexisting Exchange?2003 and Exchange?5.5 Servers 21 Modifying Store Permissions in Exchange 2000 and 2003 23 Controlling Client Access to Mailboxes 23 Controlling Client Access to Public Folders 24 Special Considerations for Messages 27 Controlling Administrative Access to Mailboxes and Public Folders 28 Mailboxes 28 Public Folders 28 Special Controls for Mail-Enabled Public Folders 32 How to View Permissions for a Mailbox Folder 33 Procedure 33 How to View Permissions That Control Client Access to a Public Folder 34 Procedure 34 How to View the Windows 2000 Version of MAPI Permissions 35 Before You Begin 35 Procedure 35 How to View Permissions That Control Access to Mail-Enabled Folder Attributes 38 Before You Begin 38 Procedure 39 Permissions Available in Exchange 39 Special Permissions 39 P