Access Security Manager provides administrators with control and verification of Exchange Mailbox and public folder access rights and permissions. 

Access Security Manager allows you to manage security for mailboxes folders and public folders in Exchange: providing integrity for your mail systems before compromised data is committed to archive.  It allows you to detect ‘shadow users’; those users who might gain access (accidentally or otherwise) to the mailboxes of others.  The Access Security Manager then enables you to update users’ permissions in line with approved security policy and practices. 

An organisation may be open to many levels of email abuse, not only issues of archive security, if there is no method of knowing who has the ability to look into mailboxes and act as if they where that mailbox owner.

Access Security Manager compiles all the information about mailbox and mail folder permissions, access rights and ‘send on behalf’ controls from multiple mail servers.  The information is presented clearly so that authorised administrators can simply modify individual or group settings. 

Mailbox and public folder permissions
Access Security Manager enables easy management of permissions which control access to core parts of the mail system and prevent unauthorized access to sensitive information.

Standard rights searches
By using a Security Wizard Manager for rights control administrators can monitor the integrity of mailbox and public folder permissions without needing to detail how the mail store security structure is configured. 

Permissions associated to a user
Provides full information of all those with permissions over user mailboxes and Exchange stores. 

‘Send on Behalf of’ permissions
Access Security Manager specifically Identifies ‘Send on Behalf of’ permissions. Administrators are able to identify block rogue users who may try to impersonate other staff – and stop them. 

Zombie users
Zombie users can occur when a user is deleted from the mail system, and their legacy permissions remain in the system.  Later when a new user joins with the same user ID he or she inherits these dormant permissions in full.  Access Security Manager alerts the administrator to Zombies. 

Secure other email archive solutions
No matter which email archive solution is in place mailboxes access rights are verified to help make sure that false information is not placed into archive.  The access rights to the archive itself can also be verified. (This second feature depends on use of exchange rights to synchronize with archive security). 

Flexible groupings of permissions
Access Security Manager can collate permissions for parts of the information store and focus on specific users, distribution lists and mailbox folders over different servers with specific mailbox exclude controls. 

Post findings and updates to external database
Posts information about permission settings and updates to an external database from where the information can be analysed and reused. 

Mass updates of permissions
Access Security Manager supports update permissions across the full selection of users and folders, whichever the administrator has selected, as a single action. 

Optional read only control
Provides hierarchically administration with operators able to be set-up to only run permissions checks and read results, but do no changes.

Automatic permission searches and updates
Access Security Manager can run regularly for preventative monitoring and control over access permissions to avoid security flaws from developing or being exploited.

Active Directory
Inspects Exchange for information that is held in Active Directory about Mailbox and Public folder access-related permissions. 

Hidden mailboxes options
Hidden mailboxes may be included or excluded from the access information.  This can simplify the analysis of information for the administrator. 

Multiple Mailbox folder types
Access Security Manager can distinguish between all folder types including: mail folders, Calendar folders, Notes folders, Journal folders, Contacts and Personal folders.  It makes sure that legitimate diary sharing is not effected by changes in permissions which access email stores.

MMC Interface
Access Security Manager is driven via a standard Microsoft MMC interface so that administrators can start without specialist training.  This reduces configuration times and results in low on-going running costs.

Scalable structure
Access Security Manager helps to secure tens to hundreds of thousands of users on multiple mail servers. The combination of detailed analysis of mail system security and clear administrative controls makes the Access Security Manager effective and reliable for both small and large organizations.

Audits Exchange security settings rapidly
Access Security Manager automates the multiple tasks involved in compiling security settings, performs mass updates and presents simple summaries for the administrator.  To detect and rectify unintentional or malicious breaches in mailbox folder or public folder access rights. 

Validates the integrity of the email stores and public folders
Make sure that the correct users have rights of each and every mailbox. 

Pre-empts security breaches
Access Security Manager can run automatically, at set times, to provide on-going audits of access rights across the whole organisation.  This enables errors to be detected before they are exploited.

Provides additional security for any email archive system
Access Security Manager has been designed to enhance the integrity of data within any email compliance archive, not only Archive One. 

Ensures the safeguards for confidential information
Access Security Manager helps prevent unauthorised users from gaining access to confidential or critical information by making certain that appropriate permissions are set. 

Finds anonymous and deleted users
Reduce the possibility of ‘zombie’ users coming into existence as organizations evolve. 

Prevents email impersonation
Prevent the organisation being misrepresented through misuse of organisational email ID’s.  Stops email users having others’ ’send on behalf’ to illegitimately impersonate.  Avoid email that they send in this guise being permanently maintained in the archive. 

Reduces leaks of email information
Removes the temptation to communicate sensitive data; Wither uncovered in error or by the efforts disgruntled staff. 

Easy to implement, maintain and manage
Quick wizard-guided install, simple admin controls and standard interfaces minimize the Total Cost of Ownership.