Determine who has given users with Minimum User Access right more proxy rights than they should.
This document (7012931) is provided subject to the disclaimer at the end of this document.
Environment
Situation
Determine who has given users with Minimum User Access right more proxy rights than they should.
Resolution
1. Run GWCHECK either from the Standalone GWCHECK utility or the GWCHECK available in the form of Mailbox/Library Maintenance.
2. Do an Analyze/Fix of the Contents of the User databases (not message databases). Don't even bother to do the "Fix Problems" in this run, we want this to be as quick of a GWCHECK run as possible. Make sure to put the Logging onto "Verbose logging".
3. View the GWCHECK log file. If you run the standalone the log will come up with the GWCHECK utility. If you run the GWCHECK from NetWare Administrator, retrieve the GWHCHECK log from the administrator's mailbox.
4. Search the log for statements such as this:
181 GENERIC_RECORD check- ACCESS_RECORD
- User [taykratzer] has granted "Minimum User" Access rights
Access granted for user "Minimum User" = 64
The access granted line tells you the access that has been given to Minimum User. In this case the user taykratzer has given everyone rights to view his calendar. That's what the 64 means. If the value were "1" that would mean that taykratzer gave everyone rights to read his mailbox.
Notes: The following numbers can be seen in the log file indicating which Proxy rights have been granted. Combinations are the sum of the individual rights. I.E. Read and Write to Tasks = 48.
0 On the Access Rights list but with no rights given
1 Read Only Mail/phone
2 Write Mail/phone
4 Read Reminder Notes
8 Write Reminder Notes
16 Read Tasks
32 Write Tasks
64 Read Appointments
128 Write Appointments
256 Subscribe to my notifications
512 Read items marked private
1024 Modify options/rules/folders
Archive items (disabled)
8192 Subscribe to my alarms
10239 Everything
NOTE: To do this on all users, go into GroupWise View, select all folks in the post office, right-click and select mailbox maintenance for all the users. It is apparently not possible to get this information when you do the verbose logging and just run it on the entire post office.
Additional Information
Formerly known as TID# 10058931
Disclaimer
This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
- Document ID:7012931
- Creation Date:23-JUL-13
- Modified Date:23-JUL-13
- NovellGroupWise
Did this document solve your problem? Provide Feedback
