Access Security Manager solves problems to do with the complexity and challenge of managing permissions on large scale Exchange environments. Improperly secured email servers can cause a range of problems which can result in users gaining access to privileged data, run you foul of laws requiring data be kept secure (such as financial or personal data) and which, if not resolved, can result in multi-million dollar fines.
 
The problems of unauthorized access can be enormous, but for larger companies where employees and administrators can change roles or move within the company the problems become even more significant due to the difficulty in managing user permissions on a large scale. Access Security Manager allows systems administrators take control of their Exchange environment, ensuring that critical data is fully accessible to those who need it, without compromising security.

Access Security Manager provides administrators with control and verification of Exchange Mailbox and public folder access rights and permissions.

Access Security Manager allows you to manage security for mailboxes folders and public folders in Exchange: providing integrity for your mail systems before compromised data is committed to archive. It allows you to detect ‘shadow users’; those users who might gain access (accidentally or otherwise) to the mailboxes of others. The Access Security Manager then enables you to update users’ permissions in line with approved security policy and practices.

An organization may be open to many levels of email abuse, not only issues of archive security, if there is no method of knowing who has the ability to look into mailboxes and act as if they were that mailbox owner.

How does the Access Security Manager work?
Access Security Manager compiles all the information about mailbox and mail folder permissions, access rights and ‘send on behalf of’ controls from multiple mail servers. The information is presented clearly so that authorized administrators can simply modify individual or group settings.

Mailbox and public folder permissions
Access Security Manager enables easy management of permissions which control access to core parts of the mail system and prevent unauthorized access to sensitive information.

Standard rights searches
By using a Security Wizard Manager for rights control administrators can monitor the integrity of mailbox and public folder permissions without needing to detail how the mail store security structure is configured.

Permissions associated to a user
Provides full information of all those with permissions over user mailboxes and Exchange stores.

‘Send on Behalf of’ permissions
Access Security Manager specifically Identifies ‘Send on Behalf of’ permissions. Administrators are able to identify and block rogue users who may try to impersonate other staff.

Zombie users
Zombie users can occur when a user is deleted from the mail system, and their legacy permissions remain in the system. Later when a new user joins with the same user ID he or she inherits these dormant permissions in full. Access Security Manager alerts the administrator to Zombies.

Secure other email archive solutions
No matter which email archive solution is in place mailboxes access rights are verified to help make sure that false information is not placed into archive. The access rights to the archive itself can also be verified. (This second feature depends on use of exchange rights to synchronize with archive security).

Flexible groupings of permissions
Access Security Manager can collate permissions for parts of the information store and focus on specific users, distribution lists and mailbox folders over different servers with specific mailbox exclude controls.

Post findings and updates to external database
Posts information about permission settings and updates to an external database from where the information can be analysed and reused.

Mass updates of permissions
Access Security Manager supports update permissions across the full selection of users and folders, whichever the administrator has selected, as a single action.

Optional read only control
Provides hierarchical administration, with operators able to be set-up to only run permissions checks and read results, but do no changes.

Automatic permission searches and updates
Access Security Manager can run regularly for preventative monitoring and control over access permissions to avoid security flaws from developing or being exploited.

Active Directory
Inspects Exchange for information that is held in Active Directory about Mailbox and Public folder access-related permissions.

Hidden mailboxes options
Hidden mailboxes may be included or excluded from the access information. This can simplify the analysis of information for the administrator.

Multiple Mailbox folder types
Access Security Manager can distinguish between all folder types including: mail folders, Calendar folders, Notes folders, Journal folders, Contacts and Personal folders. It makes sure that legitimate diary sharing is not affected by changes in permissions which access email stores.

MMC Interface
Access Security Manager is driven via a standard Microsoft Management Console (MMC) interface so that administrators can start without specialist training. This reduces configuration times and results in low on-going running costs.

Scalable structure
Access Security Manager helps to secure tens to hundreds of thousands of users on multiple mail servers. The combination of detailed analysis of mail system security and clear administrative controls makes the Access Security Manager effective and reliable for both small and large organizations.

Requirements
Access Security Manager runs on
Windows 2000 or later with the latest service packs.
Outlook 2000 or later, configured to connect to an Exchange server
Access Security Manager will process permission from Exchange 2000 or later, on the latest service packs.