Full Access to Storage Groups
How can I give an AD account full control rights to an entire storage group in Exchange 2007?
June 25th, 2008 7:49pm
What do you mean "full control" rights?
Do you want a user to be able to have full control to the contents of everyone's mailbox within a given storage group?
Or
Do you want an administrator to have full control over the administration of a single storage group, but no other storage groups within the forest?
Please fill us in on the background and what you are actually trying to accomplish.
Free Windows Admin Tool Kit Click here and download it now
June 25th, 2008 7:57pm
I want full control over the contents of everyone's mailbox within a storage group (but organization wide actually).
June 25th, 2008 7:59pm
Create a script:
Code SnippetAdd-MailboxPermission -Identity 'CN=John Smith,OU=People,DC=contoso,DC=Local' -User 'contoso\Administrator' -AccessRights 'FullAccess'
Replace:
John Smith with real names (each line with a new name)
People with the OU structure
Contoso with your domain name
Local with your top level domain
Administrator with the privileged account
You can schedule this script to run every so often, so when new accounts are added they get this permission applied.
http://technet.microsoft.com/en-us/library/bb124097(EXCHG.80).aspx
Free Windows Admin Tool Kit Click here and download it now
June 26th, 2008 3:39am
That's just silly. No real way to do it in mass, but one at a time through a script nonetheless..............lovely.
June 26th, 2008 6:15pm
Here is how to setup a blackberry service account (besadmin). To function, blackberry service accounts need similar permissions to what you're describing:
take note to "ms-Exch-Store-Admin"
Code Snippet
get-mailboxserver "<messaging_server_name> " | add-adpermission user
"BESAdmin" accessrights ExtendedRight extendedrights Send-As, Receive-As, ms-Exch-Store-Admin
Free Windows Admin Tool Kit Click here and download it now
June 27th, 2008 2:18am