Product manual

GFI MailArchiver 9 Import and Export Emails | 193
9.1.4 Microsoft
®
Exchange mailbox access permissions – Revoke Permissions
Importing mailboxes on the Microsoft
®
Exchange Server
There are no permissions to be revoked when running the GFI MailArchiver Import Export Tool
directly on the Microsoft
®
Exchange Server machine.
If the Import from Microsoft
®
Exchange Mailbox Wizard was run on a machine that is not the
Microsoft
®
Exchange Server 2003/2007/2010 server, ‘Send As’ and ‘Receive As’ permissions are
granted automatically to user credentials . It is recommended to revoke these permissions after
running the GFI MailArchiver Import Export Tool.
Importing mailboxes remotely from Microsoft Exchange 2003 server:
a. Open Exchange System Manager.
b. Navigate to Servers > <Server Name> > <Storage Group>, right click Mailbox Store and select
Properties.
c. Select Security tab.
d. From Group or user names box, select Administrator.
e. From the Permissions list, select Deny for Receive As and Send As.
f. Repeat steps 4 and 5 to deny Receive As and Send As permissions for:
Domain Admins
Enterprise Admins
Exchange Domain Servers.
g. Click Advanced button, select Allow inheritable permissions… option, and click OK.
h. Click OK to exit the Mailbox Store Properties dialog.
i. Restart the Information Store:
a. Navigate to Start > Run, type services.msc, and click OK.
b. In the Results pane, right-click Microsoft Exchange Information Store service and
click Restart.
Importing mailboxes remotely from Microsoft
®
Exchange Server 2007/2010 server:
1. Open the Microsoft Exchange Management Shell.
2. Run the following Windows
®
PowerShell commandlet:
Remove-ADPermission -identity "Mailbox Store" -User "Trusted User" -
AccessRights GenericAll
NOTE
Replace ‘Mailbox Store’ with the name of the mailbox store that contains the mailboxes
of the users and ‘Trusted User’ with the user that was previously granted full mailbox
access.
Example: