• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Granting Full Access Right - Not Working

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2007] >> Management >> Granting Full Access Right - Not Working Page: [1]
Login
Message << Older Topic   Newer Topic >>
Granting Full Access Right - Not Working - 16.Feb.2011 6:08:56 AM   
KevinM

 

Posts: 3
Joined: 15.Feb.2011
Status: offline
Hi,

For our backup process I need to grant full access rights to all mailbox's for our network Administrator account. It works OK except for one specific account that I cannot get to work, when I run from the GUI it runs the following:

Administrator
Completed

Exchange Management Shell command completed:
Remove-MailboxPermission -Identity '[mailbox]' -User 'Administrator' -Deny -InheritanceType 'All' -AccessRights 'FullAccess'

Elapsed Time: 00:00:00

Administrator
Completed

Exchange Management Shell command completed:
Add-MailboxPermission -Identity '[mailbox]' -User 'Administrator' -AccessRights 'FullAccess'


If I run powershell to view the admin rights the following is displayed but the administrator account still cannot access users mailbox.

AccessRights : {FullAccess}
Deny : FALSE
InheritanceType : All
User : Administrator
Identity :
IsInherited : FALSE
IsValid : TRUE
ObjectState : Unchanged

AccessRights : {FullAccess}
Deny : FALSE
InheritanceType : All
User : Administrator
Identity :
IsInherited : TRUE
IsValid : TRUE
ObjectState : Unchanged

AccessRights : {FullAccess}
Deny : TRUE
InheritanceType : All
User : Administrator
Identity :
IsInherited : TRUE
IsValid : TRUE
ObjectState : Unchanged

AccessRights : {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}
Deny : FALSE
InheritanceType : All
User : Administrator
Identity :
IsInherited : TRUE
IsValid : TRUE
ObjectState : Unchanged

Can anybody help?
Post #: 1
RE: Granting Full Access Right - Not Working - 3.Mar.2011 11:14:49 AM   
KevinM

 

Posts: 3
Joined: 15.Feb.2011
Status: offline
I can see that this post has 91 views but no responses yet, any ideas other than calling Microsoft?

(in reply to KevinM)
Post #: 2
RE: Granting Full Access Right - Not Working - 3.Mar.2011 11:25:56 AM   
de.blackman

 

Posts: 3542
Joined: 4.Apr.2005
From: Toronto, Canada
Status: offline
Open ADUC and locate the user account. Make sure that advanced features is enabled from the View menu and open the properties of this problematic account. On the Security tab, go into advanced and make sure inheritance checkbox IS selected.

_____________________________

Ibrahim Benna - Microsoft Exchange MVP
Forum Moderator
Navantis
@IbrahimBenna

(in reply to KevinM)
Post #: 3
RE: Granting Full Access Right - Not Working - 7.Mar.2011 8:54:32 AM   
KevinM

 

Posts: 3
Joined: 15.Feb.2011
Status: offline
Thanks for your suggestion, I have checked the account and security is exactly the same as other accounts that seem to be working OK.

Any other ideas would be gratefully appreciated.

(in reply to de.blackman)
Post #: 4
RE: Granting Full Access Right - Not Working - 15.Mar.2011 2:05:39 PM   
n1ghtwish

 

Posts: 30
Joined: 15.Mar.2011
Status: offline
As you probably know Deny takes precedent over allow, I look at this and it looks like Deny is enabled?

AccessRights : {FullAccess}
Deny : TRUE
InheritanceType : All
User : Administrator
Identity :
IsInherited : TRUE
IsValid : TRUE
ObjectState : Unchanged

If you go into ADUC and look at the mailbox permissions, if you go into Advanced mode is the deny listed there?

Do you have to use this account or could you create a service account for the purposes of this? sometimes default accounts such as the built in admin get deny permissions automatically.

(in reply to KevinM)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2007] >> Management >> Granting Full Access Right - Not Working Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter