Restriction in Exchange online

%3CLINGO-SUB%20id%3D%22lingo-sub-1471978%22%20slang%3D%22en-US%22%3ERestriction%20in%20Exchange%20online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1471978%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Folks%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%20A%20customer%20of%20mine%20who's%20a%20BPO%20would%20like%20to%20apply%20the%20below%20mentioned%20restrictions%20for%20his%20users%20on%20the%20mailbox%20and%20I'd%20like%20to%20get%20some%20clarity%20on%20this%20.%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20Users%20should%20have%20only%20read%20only%20access%20on%20their%26nbsp%3B%20own%20user%20mailbox%20so%20that%20they%20can%20only%20see%20the%20mails%20which%20land%20in%20their%20inbox%20but%20they%20can't%20forward%20it%20%2C%20delete%20it%20or%20do%20any%20kind%20of%20actions%20except%20reading%20the%20mails%20.%3C%2FP%3E%3CP%3E2.%20A%20specific%20set%20of%20users%20other%20than%20the%20one's%20mentioned%20above%20should%20not%20be%20able%20to%20add%20any%20attachments%20to%20the%20emails%20while%20sending%20an%20email%20.%26nbsp%3B%3C%2FP%3E%3CP%3E3.%20These%20restrictions%20should%20work%20on%20all%20the%20email%20clients%20as%20well%20as%20on%20OWA%20.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20here's%20my%20question%20...%3C%2FP%3E%3CP%3E1.%20Is%20it%20possible%20to%20set%20read%20only%20access%20on%20my%20own%20mailbox%20%3F%20I've%20tried%20changing%20the%20permissions%20using%20PowerShell%20but%20still%20I'm%20not%20convinced%20by%20the%20fact%20that%20changing%20the%20permissions%20to%20read%20only%20would%20help%20as%20the%20user%20is%20the%20primary%20owner%20of%20his%20mailbox%20so%20would%20changing%20the%20permissions%20make%20any%20difference%20%3F%26nbsp%3B%3C%2FP%3E%3CP%3E2.%20For%20my%203rd%20point%20above%20%2C%20I'm%20applying%20the%20restrictions%20on%20the%20user's%20mailbox%20directly%20using%20remote%20powershell%20so%20I%20guess%20any%20email%20client%20should%20honor%20the%20restriction%20set%20at%20the%20mailbox%26nbsp%3B%20isn't%20it%20%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20advise%26nbsp%3B%3C%2FP%3E%3CP%3Ecc%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F64%22%20target%3D%22_blank%22%3E%40Tony%20Redmond%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1471978%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1472160%22%20slang%3D%22en-US%22%3ERe%3A%20Restriction%20in%20Exchange%20online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1472160%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F36255%22%20target%3D%22_blank%22%3E%40VIGNESH%20G%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20don't%20think%20this%20scheme%20has%20any%20chance%20of%20working%2C%20even%20if%20you%20came%20up%20with%20some%20complicated%20set%20of%20permissions%20(that%20might%20fall%20over%20at%20any%20time).%20Exchange%20Online%20is%20designed%20on%20the%20basis%20that%20the%20mailbox%20owner%20has%20full%20access%20to%20their%20mailbox.%20And%20clients%20are%20designed%20to%20leverage%20that%20access.%20The%20customer%20is%20obviously%20living%20in%20the%20past%20when%20organizations%20tried%20to%20impose%20this%20type%20of%20control%20over%20what%20employees%20do.%20They%20need%20to%20come%20into%20the%2021st%20century.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hi Folks ,

  A customer of mine who's a BPO would like to apply the below mentioned restrictions for his users on the mailbox and I'd like to get some clarity on this . 

1. Users should have only read only access on their  own user mailbox so that they can only see the mails which land in their inbox but they can't forward it , delete it or do any kind of actions except reading the mails .

2. A specific set of users other than the one's mentioned above should not be able to add any attachments to the emails while sending an email . 

3. These restrictions should work on all the email clients as well as on OWA .

 

So here's my question ...

1. Is it possible to set read only access on my own mailbox ? I've tried changing the permissions using PowerShell but still I'm not convinced by the fact that changing the permissions to read only would help as the user is the primary owner of his mailbox so would changing the permissions make any difference ? 

2. For my 3rd point above , I'm applying the restrictions on the user's mailbox directly using remote powershell so I guess any email client should honor the restriction set at the mailbox  isn't it ? 

 

Please advise 

cc  @Tony Redmond 

2 Replies

@VIGNESH G 

 

I don't think this scheme has any chance of working, even if you came up with some complicated set of permissions (that might fall over at any time). Exchange Online is designed on the basis that the mailbox owner has full access to their mailbox. And clients are designed to leverage that access. The customer is obviously living in the past when organizations tried to impose this type of control over what employees do. They need to come into the 21st century.

@Tony Redmond ...Thanks for clarifying Tony