How can I give an AD account full control rights to an entire storage group in Exchange 2007?

What do you mean "full control" rights? Do you want a user to be able to have full control to the contents of everyone's mailbox within a given storage group? Or Do you want an administrator to have full control over the administration of a single storage group, but no other storage groups within the forest? Please fill us in on the background and what you are actually trying to accomplish.

I want full control over the contents of everyone's mailbox within a storage group (but organization wide actually).

Create a script: Code SnippetAdd-MailboxPermission -Identity 'CN=John Smith,OU=People,DC=contoso,DC=Local' -User 'contoso\Administrator' -AccessRights 'FullAccess' Replace: John Smith with real names (each line with a new name) People with the OU structure Contoso with your domain name Local with your top level domain Administrator with the privileged account You can schedule this script to run every so often, so when new accounts are added they get this permission applied. http://technet.microsoft.com/en-us/library/bb124097(EXCHG.80).aspx

That's just silly. No real way to do it in mass, but one at a time through a script nonetheless..............lovely.

Here is how to setup a blackberry service account (besadmin). To function, blackberry service accounts need similar permissions to what you're describing: take note to "ms-Exch-Store-Admin" Code Snippet get-mailboxserver "<messaging_server_name> " | add-adpermission user "BESAdmin" accessrights ExtendedRight extendedrights Send-As, Receive-As, ms-Exch-Store-Admin