Exchange Server Forums

Moving shared mailboxes to new server. Lose permissions?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Management >> Moving shared mailboxes to new server. Lose permissions?

Page: [1]

Message

<< Older Topic Newer Topic >>

Moving shared mailboxes to new server. Lose permissions? - 27.Jun.2008 10:45:22 AM

x0rerror

Posts: 35
Joined: 10.Jul.2007
Status: offline

Hi,

We are nearing final transfer stages from an e2k server to a e2k7 server.

We have numerous shared mailboxes (either permissions set through sec groups or explicitly defined in security )

Will these users permissions for these 'shared' mailboxes be lost when i move them to the new server?

I ran a test or two and that is what it looks like.

Is there any way to preserve the permission(s) on transfer?

thanks alot,

Post #: 1

Featured Links*

RE: Moving shared mailboxes to new server. Lose permiss... - 27.Jun.2008 11:08:15 AM

sipstate001

Posts: 60
Joined: 20.Jun.2008
Status: offline

That is what I was told. Unless someone else has any other type of feedback... I'm pretty sure you are up $h!t creek without a paddle like the rest of us!

(in reply to x0rerror)

Post #: 2

RE: Moving shared mailboxes to new server. Lose permiss... - 30.Jun.2008 2:33:07 PM

Sembee

Posts: 3130
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

It isn't clear if you are going across Exchange orgs or not.
If you are simply moving the mailbox then the permissions stick as they are stored in the domain.
If you are going across Forests/Exchange Orgs then you will lose the permissions and will need to clean them up as they will become SIDs.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to sipstate001)

Post #: 3

RE: Moving shared mailboxes to new server. Lose permiss... - 2.Jul.2008 3:27:29 PM

x0rerror

Posts: 35
Joined: 10.Jul.2007
Status: offline

quote:

ORIGINAL: Sembee

It isn't clear if you are going across Exchange orgs or not.
If you are simply moving the mailbox then the permissions stick as they are stored in the domain.
If you are going across Forests/Exchange Orgs then you will lose the permissions and will need to clean them up as they will become SIDs.

Simon.

Hi Sembee,
(same domain)

Is this confirmed? It seems when i'm moving from e2k to e2k7 i lose permissions.

If i look at my security permissions for the mailbox through AD it shows that the security permissions were retained. i.e. John Doe has FULL ACCESS.

Yet if i try to access the mailbox i get an access denied error. If i then goto the e2k7 EMC and look at the FULL ACCESS permissions, they are not showing.

I manually have to re-add everyone who had access or full access. Once they have been re-added to the FULL access perms in my e2k7 EMC they can then re-open the mailbox as they did on the exchange 2k server.

I know it doesn't quite make sense. Permissions should be retained.

Could some config be wrong somewhere that would cause a loss of permissions.

I'm going to go move shared mailbox #3245 from e2k to e2k7 to see if i can reproduce what i have been seeing upon the last shared box transfers.

thanks again for your insight.

Luckily our exchange org is small yet it still seems like a tedious job.

(in reply to Sembee)

Post #: 4

RE: Moving shared mailboxes to new server. Lose permiss... - 2.Jul.2008 5:12:43 PM

Sembee

Posts: 3130
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

Exchange permissions set on the mailbox are not lost. I have moved thousands of mailboxes without permissions being lost - as long as you use Move Mailbox to move the content.
However there have been some permission behaviour changes. If the users are Domain Admins then certain permissions are removed.
Furthermore if you are using inherited permissions on the store, those are lost, because they are inherited. You have to set those permissions again on the store.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to x0rerror)

Post #: 5