Grant Full access HELP
We would like to grant our Admins full access to every mailbox on our Exchange 2007 SP1 server.
When they currently go to FILE>OPEN>OTHER USERS FOLDER they get an error stating
Can not display the folder: Inbox folder can't be found.
Any ideas ?
October 8th, 2008 12:10am
You need to give the "FullAccess" permission to the Admin. You can do this in powershell like this:
Code Snippet
Get-Mailbox -Server server01 | Add-MailboxPermission -User yourdomain\jsmith -AccessRights "FullAccess"
This assumes your admin's name is "jsmith" and the server is called "server01" in the domain "yourdomain".
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2008 1:23am
Hi,
Mikes commanddefinitely works and helps you to give full mailbox access.
Additionally, check below article. Giving all mailboxes assess on a server with this method doesnt require to give permission to the mailboxeswhich will be created in the future.
FAQ: Access on All the Mailboxes of a Server - Exchange2007
http://exchangeshare.wordpress.com/2008/09/05/faq-access-on-all-the-mailboxes-of-a-server-exchange-2007/
October 8th, 2008 6:53am
Also, I'm not sure this is the correct command, but you might be able to swap out Receive-As with FullAccess.If so, the permission would live with the database, and apply to new users placed there. You would have to runone time, for each database.
Amit, Would this work?
Add-ADPermission -Identity "Mailbox Store" -User "Trusted User" -ExtendedRights Receive-As
http://technet.microsoft.com/en-us/library/aa996343(EXCHG.80).aspx
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2008 3:38pm
Yes Mike, that should work to give permission on all the mailboxes of a Database to user Trusted User.
Below command will give permissions on all the mailboxes of a Server to user "Auditor"
Get-MailboxDatabase -Server ESS-Exch702 | Add-ADPermission -User Auditor -ExtendedRights Receive-As
October 8th, 2008 4:36pm
Yeah, I saw that article too, but thats just for receive-as. not full access. will the extendedrights syntax work with fullaccess as well? I could try it myself, but if you know off hand...
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2008 4:46pm
Here we are giving Receive-As permission on AD objects(eg. a mailbox database) with Add-ADPermission and FullAccess is mailbox permission so it doesn't work with Add-ADPermission.
But if you want to give FullMailbox access explicitly on all mailboxes then your pervious command works perfectly as FullAccess permission requires to assign in mailbox right ACLs with Add-MailboxPermission cmdlet.
eg. Get-Mailbox -Server ESS-Exch702 | Add-MailboxPermission -User Auditor -AccessRights FullAccess
Side Note: Receive-As permission works only when we open mailbox in outlook and not in OWA, for OWA we need to give FullAccess permission explicitly on all mailboxes.
How to Enable Explicit Logons in Outlook Web Accesshttp://technet.microsoft.com/en-us/library/aa998830(EXCHG.80).aspx
October 8th, 2008 5:07pm
Mike Crowley wrote:
You need to give the "FullAccess" permission to the Admin. You can do this in powershell like this:
Code Snippet
Get-Mailbox -Server server01 | Add-MailboxPermission -User yourdomain\jsmith -AccessRights "FullAccess"
This assumes your admin's name is "jsmith" and the server is called "server01" in the domain "yourdomain".
Thanks guys.....this one worked.
Still a NOOB in Powershell
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2008 5:54pm