We have an exchange 2007 server, which was migrated from exchange 2003. We also have BES server(blackberry's) which access this server. we have setup Full Mailbox rights for the blackberry account BesAdmin on the mailbox store. When i create a new user or access an existing user in the exchange mangement console and right click on their mail box and select manage full mailbox permissions i see BesAdmin, Exchange Domain Servers, Exchange Services, and Self. These permissions dont seem be taking effect correctly. The user can access there own mailbox but BesAdmin cannot, when i try using bes admin i get access denied. This happens with both existing users and newly created users. i also put my own username in the exchange services group and i cannot access it either. if i go back into the full mailbox permission and change anything, (add an account, remove another account) the permissions are applyed correctly and besadmin can access the mailbox from then on. i dont have to have to manually change something in each user account for this to take effect, any ideas.

You can write shell script for the same.Follow the below KB for more information regarding how to assign fullMailbox permission using Exchange cmdshell.How to Allow Mailbox Accesshttp://technet.microsoft.com/en-us/library/aa996343.aspxArun Kumar | MCSE - 2K3 + Messaging | ITIL-F V3

How did you give full mailbox permission on mailboxes? You need to follow Blackberry guidance on configuring BES admin account and also make sure that it is not member of any other admin groups. Assigning permissions for a BlackBerry Enterprise Server service account http://www.blackberry.com/btsc/viewContent.do?externalId=KB02276&sliceId=1 Amit Tank | MVP - Exchange | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com