I am trying to get an Exchange 2007 SP1 server to use an audit mailbox. (Special user that has ability to "open" any users mailbox on the system.)I performed the following steps as per:http://msexchangeteam.com/archive/2006/11/28/431665.aspx1) Used Exchange Console to add pemission2) gpupdate /force on workstation3) rebooted workstation4) Opened Outlook 20035)This implies there may be a bug?http://social.technet.microsoft.com/Forums/en-US/partnermsgexchange/thread/8af97a51-b414-46f3-b98d-f3260010c069What further steps do I need to take to create an audit account?

I think we shall refer to article below to grant the permission, and restart Information store service instead of updating global policy if you want to take effect immediately Notes: Please dont add the Audit account into any built-in administration group, which usually have inherited explicit deny on certain mailbox access permissions How to Allow Mailbox Access HOW TO: Grant Full Mailbox Access permission By the way, I cant open the thread at the bottom of your post

This is same proceudre explained by James but I documented with screenshot so you might like to read it...FAQ: Access on All the Mailboxes of a Server Exchange 2007http://exchangeshare.wordpress.com/2008/09/05/faq-access-on-all-the-mailboxes-of-a-server-exchange-2007/Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

New server install had the following command invoked:Get-Mailbox | Add-MailboxPermission user MyAuditMailbox AccessRight FullAccess Inheritancetype allI waited two hoursShouldn't that allow me access to the mailboxes in outlook?Unable to display the folder. The Information Store could not be opened when trying to "open" the mailbox from the MyAuditMailbox user. This is different than before presumably because I did not wait the 2 hours for thIS refresh.The documentation that has been cited suggest all I need is:Get-Mailbox | Add-MailboxPermission user MyAuditMailbox AccessRight FullAccess Inheritancetype allI waited two hoursto be able to open any mailbox on the Exchange server.

Please perform the cmdlet below on the Unable to display the folder mailbox, and check the output Get-MailboxPermission UserAlias Please check if theres any related event in the application log

Get-MailboxPermission e2 |ft -property AccessRights, IsInherited,deny | out-File -width 200 mp.txtresults in:AccessRights IsInherited Deny ------------ ----------- ---- {FullAccess, SendAs, ReadPermission}False False {ReadPermission}True False {FullAccess} True True {FullAccess} True True {FullAccess} True True {FullAccess} True True {FullAccess} True True {ReadPermission}True False {FullAccess} True False {FullAccess} True False {ReadPermission}True False {FullAccess, DeleteItem, ReadPermission, ChangePermission, Chan... True False {ReadPermission}True False {ReadPermission}True False {FullAccess, DeleteItem, ReadPermission, ChangePermission, Chan... True False {ReadPermission} True False {FullAccess, DeleteItem, ReadPermission, ChangePermission, Chan... True False {FullAccess, DeleteItem, ReadPermission, ChangePermission, Chan... True False

Please create two test mailboxes, not put them into any security group, and then try to grant the permissions from one to another , see if the symptom still persists Please try to restart the Information Store service Could you provide the full output from the Get-MailboxPermission? You can change the sensitive name to some fictitious names Get-MailboxPermission User | ft wrap