A user can inherit a permissions from the parent object. If the
Allow and Deny check boxes for a permission are
shaded when you select a user or group in the Name box, the
recipient has inherited permissions from the parent object. You can
change inherited permissions and select the objects the modified
permissions apply to.
On the Start menu, point to
Programs, point to Administrative Tools, and then
click Active Directory Users and Computers.
In Active Directory Users and Computers, on the
View menu, click Advanced Features.
In the console tree, expand the Windows 2000 domain.
Double-click Users, or double-click the node that contains
the recipient information you want to modify.
In the details pane, double-click the mailbox-enabled user you
On the Exchange Advanced tab, click Mailbox
On the Mailbox Rights tab, in Name, select a
recipient, and then click Advanced.
In the Access Control Settings dialog box, on the
Permissions tab, select the same recipient in Permission
Entries, and then click View/Edit.
On the Object tab, in Permissions, select either
the Allow or Deny check box next to each
To specify how the permission modifications apply, in the
Apply onto drop-down list, make a selection.
To prevent these permissions from being inherited by child
objects, select the Apply these permissions to objects and/or
containers within this container only check box.
Clearing or selecting the Apply these permissions to objects
and/or containers within this container only check box allows
or prevents the modified permissions from propagating outside of
the container. It does not impact the permissions this object