Resource delegates in Exchange 2007 receive all the meeting request details despite a resource configuration that intends to restrict this information

Consider the following scenario. You configure a Microsoft Exchange Server 2007 resource mailbox, such as a conference room mailbox. You configure this resource to remove all information from a meeting request that is forwarded to a delegate for that resource. However, when a resource delegate receives a meeting request for that resource, the information in the meeting request is not removed as expected. This includes any attachments or comments to the meeting request.

This behavior is by design in Exchange 2007. The meeting information and attachments are left in the forwarded meeting request so that the delegate can determine whether the meeting request is a legitimate one or not.

System administrators should be aware that when the delegate approves a meeting request for a resource, the message that they receive is forwarded to the resource mailbox. This forwarded message then replaces the original meeting entry in the calendar. This behavior may cause an unnecessary increase in the size of the resource mailbox.�

Additionally, the resource delegate has access to all meeting information. This includes any attachments, comments, and any other sensitive information in the meeting request.