Home > Uncategorized > Exchange item security woes

Exchange item security woes

Everyone knows you can mail-enable a global security group in order to have it’s members’ mailbox account logons gain access to an object (I mean, c’mon!). But, you might be pulling your hair out as to why, say…. a public folder you’ve added an ACE for this mail-enabled security group is not reflected on the users’ mailboxes via their Outlook session (it’s my friend’s Outlook session, I swear).

Simple… as you do with user sessions and group membership (by way of kerberos cert grants), you need to log out and back on. What’s that you say? “I’ve rebooted several times and still nothing. It’s Friday afternoon… I don’t need this shit.”

Well, silly! Why don’t you just go into Outlook’s account settings> email account settings> more settings> security tab> check off “always prompt for logon credentials” under “User identification”> OK your way out. Close outlook. Reopen it. Log back on to Exchange, and the god damn permissions granted by the m*fing ACE will actually be reflected.

Go back in and uncheck that option, and you’re back to normal. And you only developed a single twitch in process.

Advertisements
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: