Moving shared mailboxes to new server. Lose permissions? (Full Version)

All Forums >> [Microsoft Exchange 2007] >> Management



Message

x0rerror -> Moving shared mailboxes to new server. Lose permissions? (27.Jun.2008 10:45:22 AM)

Hi,

We are nearing final transfer stages from an e2k server to a e2k7 server.

We have numerous shared mailboxes (either permissions set through sec groups or explicitly defined in security )

Will these users permissions for these 'shared' mailboxes be lost when i move them to the new server?

I ran a test or two and that is what it looks like.

Is there any way to preserve the permission(s) on transfer?

thanks alot,



sipstate001 -> RE: Moving shared mailboxes to new server. Lose permissions? (27.Jun.2008 11:08:15 AM)

That is what I was told.  Unless someone else has any other type of feedback... I'm pretty sure you are up $h!t creek without a paddle like the rest of us!



Sembee -> RE: Moving shared mailboxes to new server. Lose permissions? (30.Jun.2008 2:33:07 PM)

It isn't clear if you are going across Exchange orgs or not.
If you are simply moving the mailbox then the permissions stick as they are stored in the domain.
If you are going across Forests/Exchange Orgs then you will lose the permissions and will need to clean them up as they will become SIDs.

Simon.



x0rerror -> RE: Moving shared mailboxes to new server. Lose permissions? (2.Jul.2008 3:27:29 PM)

quote:

ORIGINAL: Sembee

It isn't clear if you are going across Exchange orgs or not.
If you are simply moving the mailbox then the permissions stick as they are stored in the domain.
If you are going across Forests/Exchange Orgs then you will lose the permissions and will need to clean them up as they will become SIDs.

Simon.


Hi Sembee,
(same domain)


Is this confirmed? It seems when i'm moving from e2k to e2k7 i lose permissions.

If i look at my security permissions for the mailbox through AD it shows that the security permissions were retained. i.e. John Doe has FULL ACCESS.

Yet if i try to access the mailbox i get an access denied error. If i then goto the e2k7 EMC and look at the FULL ACCESS permissions, they are not showing.

I manually have to re-add everyone who had access or full access. Once they have been re-added to the FULL access perms in my e2k7 EMC they can then re-open the mailbox as they did on the exchange 2k server.

I know it doesn't quite make sense. Permissions should be retained.

Could some config be wrong somewhere that would cause a loss of permissions.

I'm going to go move shared mailbox #3245 from e2k to e2k7 to see if i can reproduce what i have been seeing upon the last shared box transfers.

thanks again for your insight.


Luckily our exchange org is small yet it still seems like a tedious job.



Sembee -> RE: Moving shared mailboxes to new server. Lose permissions? (2.Jul.2008 5:12:43 PM)

Exchange permissions set on the mailbox are not lost. I have moved thousands of mailboxes without permissions being lost - as long as you use Move Mailbox to move the content.
However there have been some permission behaviour changes. If the users are Domain Admins then certain permissions are removed.
Furthermore if you are using inherited permissions on the store, those are lost, because they are inherited. You have to set those permissions again on the store.

Simon.



Page: [1]