Domain Admins
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
Domain Admins - 24.Nov.2006 3:14:41 AM
|
|
|
stooie29
Posts: 6
Joined: 24.Nov.2006
Status: offline
|
Hello,
Does MailArchiver grant full permissions to the DomainAdmins group? I have selected a group in access control but it appears that anyone with domain admins can access the configuration and list all users mailboxes. I would like to be able to lock it sown to a specific group.
Cheers
|
|
|
|
|
RE: Domain Admins - 24.Nov.2006 6:47:37 AM
|
|
|
Rodion
Posts: 834
Joined: 15.Nov.2004
Status: offline
|
Hello
By default domain admins have access to the configuration but not to the full archive. You need to configure the Full Access group to determine who can access all emails.
_____________________________
Best regards
Rodion Denisyuk
GFI Software Ltd
|
|
|
|
RE: Domain Admins - 19.Dec.2006 3:35:57 PM
|
|
|
canalien
Posts: 12
Joined: 19.Dec.2006
Status: offline
|
Rodion,
Your previous post says "By default domain admins have access to the configuration..." Is there any way to limit this so only specific admins have access to the configuration page? Because of security & privacy concerns in our organization, I would not want to allow any or all of our admins to have the ability to make them selves a "manager" or add themselves to the Full access group and view all email.
I realize that as admins they could allways get this type of access in the past, if they were so inclined, but not this easily.
Thanks,
Brian
|
|
|
|
|
RE: Domain Admins - 20.Dec.2006 8:09:07 AM
|
|
|
Patrizia
Posts: 8474
Joined: 18.Aug.2003
From: Malta
Status: offline
|
canalien,
You can modify the 'Full access group" in order to specify who has access to the Configuration and who does not.
_____________________________
Patrizia Caruana
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
|
RE: Domain Admins - 28.Dec.2006 3:54:21 PM
|
|
|
bugme
Posts: 3
Joined: 11.Aug.2006
Status: offline
|
Just so I understand correctly - you're saying that only members of the "Full access group" (if configured) will have access to the Configuration portion of the menu tree?
We have a requirement that only two of our domain admins have full access to all email in the company, but we have more than 2 members of the "domain administrators" group. And, since the machine GFI MailArchiver is installed on is part of the domain, ALL domain admins are by inheritance local administrators on the MailArchiver machine, and get the Configuration menu by default.
For future builds, I would highly recommend a separate "superuser" group setting disctict from Domain Administrators for controlling access to the configuration.
|
|
|
|
|
RE: Domain Admins - 29.Dec.2006 3:25:35 AM
|
|
|
Rodion
Posts: 834
Joined: 15.Nov.2004
Status: offline
|
Hi
It is possible to restrict the access to the configuration to the certain users/groups through the config files, however the procedure is different for MAR3 and MAR4. Please specify what version of GFI MailArchiver you are using.
_____________________________
Best regards
Rodion Denisyuk
GFI Software Ltd
|
|
|
|
|
RE: Domain Admins - 2.Jan.2007 11:12:12 AM
|
|
|
bugme
Posts: 3
Joined: 11.Aug.2006
Status: offline
|
I'm sure everyone would like to see the procedure on both options as a technical article - but I'm evaluating version 4.
|
|
|
|
|
RE: Domain Admins - 4.Jan.2007 7:02:15 AM
|
|
|
sushibilly
Posts: 1
Joined: 4.Jan.2007
Status: offline
|
I would also like to see this solution. We have users that need access to the Configuration Tools, but who are not full domain admins
|
|
|
|
|
RE: Domain Admins - 4.Jan.2007 5:21:52 PM
|
|
|
canalien
Posts: 12
Joined: 19.Dec.2006
Status: offline
|
Hi Rodion,
I am 15 days into an Eval of MAR4 and if I can resolve the issue of restricting access to only certain members of my domain administrators group (or by building a new secuirty group with only specific users in it) I can issue a purchase order for this product.
Without the ability to limit access to the configuration section of the tree, I will not be able to use this product due to our security policy. I was just on a "Live Chat" and I was told that the only way to do so would be to deny access to the entire website, which of course does not work, since my admins do get email that needs to be archived.
Can you assit me in resolving this so I can proceed with a purchase?
Thanks,
Brian
|
|
|
|
|
RE: Domain Admins - 5.Jan.2007 3:02:32 AM
|
|
|
Rodion
Posts: 834
Joined: 15.Nov.2004
Status: offline
|
Hi all
We plan to publish a KB article in the coming few days with the details on how to configure access to the MailArchiver UI in general and Configuration in particular. The procedure will be provided for both MAR3 and MAR4
_____________________________
Best regards
Rodion Denisyuk
GFI Software Ltd
|
|
|
|
|
RE: Domain Admins - 12.Jan.2007 4:17:03 PM
|
|
|
keiffers
Posts: 4
Joined: 12.Jan.2007
Status: offline
|
We also have this need due to different levels of access allowed to email for users in the domain admins group. I didn't see a knowledge base article just yet. Is there a time frame for this article?
|
|
|
|
|
RE: Domain Admins - 15.Jan.2007 5:13:56 AM
|
|
|
Patrizia
Posts: 8474
Joined: 18.Aug.2003
From: Malta
Status: offline
|
keiffers,
We are still working on this article.
_____________________________
Patrizia Caruana
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
RE: Domain Admins - 16.Jan.2007 9:14:06 AM
|
|
|
canalien
Posts: 12
Joined: 19.Dec.2006
Status: offline
|
The posted solution works great - thank you. I will be proceeding with the purchase of this product today!
Brian
|
|
|
|
|
RE: Domain Admins - 17.Jan.2007 10:14:31 AM
|
|
|
Patrizia
Posts: 8474
Joined: 18.Aug.2003
From: Malta
Status: offline
|
Hi,
Thanks for the update!
_____________________________
Patrizia Caruana
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
