Exchange 2003 -> 2010 migration. What happens to inherited permissions that were set at the organisation level?
Testing a 2003 / 2010 exchange co-existence at the moment. On 2003 at the organisation level we have a 3rd party archive service account set that has full permissions to everyones mailbox for archiving purposes.
However, when a mailbox is moved to 2010, it doesn't keep these inherited permissions as there are no such things as storage groups in 2010. Is there a way to move these permissions across to 2010 or set an account with full permissions for all mailboxes
in 2010 easily which will continue to apply for new mailboxes as they are created?
November 30th, 2010 4:56pm
You could set it at the admin group, server, store or mailbox level.
I would ask the vendor if they support Exchange 2010 and for their recommended permissionsettings.
Free Windows Admin Tool Kit Click here and download it now
November 30th, 2010 8:15pm
Vendor supports 2010 but they don't have much experience with it so have advised that the journal account needs access to all mailboxes but don't know how to set it in 2010 (which isn't confidence inspiring!)
It is still in the test phase whilst people learn 2010 here so we were wondering how to do it. It's all Role Based groups now which we understand but which role has full mailbox rights by default (if a role such as that even exists without creating
a new role).
December 2nd, 2010 4:47pm
Hi,
You will have to add the permission based on Database level in Exchange 2010. This can be done by following cmd.
Get-MailboxDatabase | Add-ADPermission -User "Username" -AccessRights ExtendedRight -ExtendedRights
For more information on Extended rights refer to below link:
http://technet.microsoft.com/en-us/library/bb124403.aspx
For more information on Role based permission refer to tese links:
http://mscerts.net/application_server/exchange%202010%20permissions%20model%20(part%201).aspx
http://www.msexchange.org/articles_tutorials/exchange-server-2010/management-administration/exchange-2010-role-based-access-control-part1.htmlNagaraj N
Free Windows Admin Tool Kit Click here and download it now
December 18th, 2010 2:56am