Hello, for an Exchange 2007 store we try to grant permission to one of Exchange admin member xyz_user so that he can manage user mailbox. For example, giving "Full Access Permission" or "Send As Permission" to mailbox for domain\xyz_user. We tried to give him "Exchange Recipient Administrator" Role under Exchange Administrators Identity as same as all other admin members, we see in EMS correct role. Also granted "ms-Exch-Store-Admin" rights from Exchange Powershell by using the command below : Add-ADPermission -Identity "OU=......." -User "domain\xyz_user" _ExtendedRights ms-Exch-Store-Admin -InheritanceType All" Running he PowerShell comad we see following warning: "Appropriate ACE is already present on object "OU=....." for account "domain\xyz_user" And we see Deny and Inherits = False and for rights "ms-Exch-Store-Admin" We checked after sometime to manage the users mailbox but it fails with Error "Failed to commit the change on object .... because Access is denied. MapiExceptionNoAccess: Unable to set Mailbox Security Descriptor (hr=0x80070005,ec=-2147024891) Also today - after 3 days - it is still failing. thanks - Katrin Katrin

Is that user a member of any admin group like account operator, domain admin, etc...or any nested group that contains this. If yes, remove and test. Sukh

I just ever used Add-MailboxPermission cmdlet, try this one: Add-MailboxPermission -Identity 'CN=aaa,OU=userou,DC=yourdomain,DC=com' -User 'yourdomain\bbb' -AccessRights 'FullAccess' -InheritanceType All Then user bbb has the full access rights to manage aaa's mailbox.Nile Jiang- Please mark the post as answer if it answers your question. http://www.usefulshare.com

Hello, for an Exchange 2007 store we try to grant permission to one of Exchange admin member xyz_user so that he can manage user mailbox. For example, giving "Full Access Permission" or "Send As Permission" to mailbox for domain\xyz_user. We tried to give him "Exchange Recipient Administrator" Role under Exchange Administrators Identity as same as all other admin members, we see in EMS correct role. Hi Katrin, Do you want to give Full Access Permission to xyz_user on someone's mailbox? Or delegate the Full Access Permisson to xyz-user, thus he can manage someone's mailbox? I guess you want to do the latter. To perform this procedure, the account you use must be delegated the following: Exchange Server Administrator role Administrator rights on the computer How to Allow Mailbox Access http://technet.microsoft.com/en-us/library/aa996343(EXCHG.80).aspx Frank Wang Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Hello, for an Exchange 2007 store we try to grant permission to one of Exchange admin member xyz_user so that he can manage user mailbox. For example, giving "Full Access Permission" or "Send As Permission" to mailbox for domain\xyz_user. We tried to give him "Exchange Recipient Administrator" Role under Exchange Administrators Identity as same as all other admin members, we see in EMS correct role. Hi Katrin, Do you want to give Full Access Permission to xyz_user on someone's mailbox? Or delegate the Full Access Permisson to xyz-user, thus he can manage someone's mailbox? I guess you want to do the latter. To perform this procedure, the account you use must be delegated the following: Exchange Server Administrator role Administrator rights on the computer How to Allow Mailbox Access http://technet.microsoft.com/en-us/library/aa996343(EXCHG.80).aspx Frank Wang Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Hi Katrin, Any updates? Frank Wang

Hello Frank, you can close the thread, there was an mismatched OU permssion issue. thanks for the given informations.Katrin

Hello Frank, you can close the thread, there was an mismatched OU permssion issue. thanks for the given informations.Katrin