Exchange Server Forums

Full Mailbox Access to an Exchange 2007 server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Management >> Full Mailbox Access to an Exchange 2007 server

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Full Mailbox Access to an Exchange 2007 server - 19.Aug.2008 2:49:22 PM

hywaydave

Posts: 57
Joined: 9.Mar.2006
Status: offline

I need to be able to members of the Domain Admin group full mailbox access to all existing and future mailboxes that are created on our Exchange 2007 server. I know how to grant full access to a single mailbox via the EMC, but there has to be a way to grant access to all. I added Domain Admins as an Exchange Server Administrator via the EMC and have tried the following commands with no luck:

Add-ADPermission -Identity "Mailbox Store" -User "Trusted User" -ExtendedRights Receive-As

Get-MailboxDatabase -identity "SERVERNAME\First Storage Group\Mailbox Database" | Add-ADPermission -user administrator -AccessRights GenericAll

I then issued the command and that seemed to have worked, however it does not work for new mailboxes that are created afterwards:

Get-Mailbox | Add-MailboxPermission -User 'YOURDOMAIN\Mailbox Managers' -AccessRights 'FullAccess'

Any Suggestions?

Post #: 1

Featured Links*

RE: Full Mailbox Access to an Exchange 2007 server - 20.Aug.2008 11:30:08 PM

Elan Shudnow

Posts: 579
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline

For all mailboxes, you would have to run the command on the database or storage group itself:
Add-ADPermission -Identity "Mailbox Store" -User "Trusted User" -ExtendedRights Receive-As

I know you said that doesn';t work for you, try adding -InheritanceType All

< Message edited by Elan Shudnow -- 20.Aug.2008 11:37:17 PM >

_____________________________

Elan Shudnow
http://www.shudnow.net

(in reply to hywaydave)

Post #: 2

RE: Full Mailbox Access to an Exchange 2007 server - 21.Aug.2008 1:20:46 AM

Elan Shudnow

Posts: 579
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline

Also, just to add, sometimes working with permissions is a pain. For example, I just played in my lab with a few different user accounts. I gave domain admins permissions and some user accounts it worked and some it didn't.

I then did a get-mailbox permission and the user accounts it didn't work for had a non inherited deny. That basically denies the user that is in the domain admins from viewing the mailbox. I had to do a remove-mailboxpermission mailbox -user userhere -deny. That essentially removes that deny permission allowing for the domain admins group to be added to the permission list and successfully get access.

I only tested this with permissions on a single mailbox and not on an entire database. But hopefully the info above helps you get to where you need to get.

_____________________________

Elan Shudnow
http://www.shudnow.net

(in reply to Elan Shudnow)

Post #: 3

RE: Full Mailbox Access to an Exchange 2007 server - 3.Sep.2008 12:14:48 PM

dboftlp

Posts: 1
Joined: 3.Sep.2008
Status: offline

Just wondering if you resolved this. I'm new to the powershell and fear it's potential for destruction with a misplaced ";", yet I need to grant access to the mailstore to all domain admins, heck even exchange admins would do.

Thanks in advance.
DBofTLP

(in reply to hywaydave)

Post #: 4