Prevent Lotus Admin opening user mailbox

HelloHow to prevent the lotus notes administrator, to open and look in all users mailboxs.?

In our organization NotesAdmin can access every mailbox, and users are not aware that access is done without their agreement.

As administrator is an external contractor, it’s really important to change this behaviour.

thanks

Subject: ACLS & Full Access Administrator

Administrators who are designated as full access administrators in the Server document have manager access to all databases, with all privileges enabled, on the server, regardless of whether they are listed in the database ACLs.

Remove this person from that field in the server document, and from any group which is in every mailfile ACL. Add them to the ACL of only the dbs you want them to have. Be sure to include any system databases they need to access.

Be aware that, as an administrator, they neccesarily have other access, such as modifying groups. So, there are likely to still be ways they could grant themselves access to a mailfile if they are determined. But this should at least remove the default access, and calm your users.

Subject: you can Encrypt incoming mail

You can Encrypt incoming mailn in user document or in notes.ini for all server users.

FIELD in document person is “When receiving unencrypted mail, encrypt before storing in your mailfile:” in basics tab

Full Access Adminitrator dont read this document.

Regards

Subject: It’ll kinda mess up the option to delegate stuff though

And don’t lose those id files - implement ID Recovery at the absolute minimum (especially if you have R7 or older clients), but if all your users are on R8.5+, implement ID Vault.

You don’t want to tell your CEO he can not access any of his old email after his laptop get’s stolen from the backseat of his car :wink: