I am in the midst of a email migration and I needed to give send-as permissions to a service account for all mailboxes in a specific exchange database. I ran the below command:

Get-mailboxdatabase "dbname"| Add-ADPermission -User xx\serviceaccount -ExtendedRights Send-As

This appaerntly broke something with mailbox full access permissions for the service account as it can nolonger logon to the mailboxes on the database I ran this against. I tried running the command but it doesn't reset the permissions:

Get-mailboxdatabase "dbname"|Add-ADPermission -User xx\serviceaccount AccessRights GenericAll -ExtendedRights Send-As,Receive-As

If I manually remove and re-add permssions in EMC on an individual mailbox, it works fine. I was gong to run the following command but I'm not sure what the results will be:

get-mailboxdatabase "dbname" | get-mailbox | add-mailboxpermission -user xx\serviceaccount  -accessrights fullaccess -inheritancetype all

Any help will be greatly appreciated

Drdra11

Send As is a right that's applied to users, not mailboxes, and users can't inherit rights from a mailbox store.

You can do this:

Get-Mailbox -Database DBNAME | Add-ADPermission -User xx\serviceaccount -AccessRights ExtendedRight -ExtendedRights "Send As"

but you'll need to run it periodically to catch mailboxes that are moved into the database later.

Thanks Ed. Will the following command work to force a reset of full access permissions on the database for the service account? Get-Mailbox -Database <Database Name> | Add-MailboxPermission -User <User Who should have Full Access> -InheritanceType All -accessRights FullAccess . I need to reset full access permissions for the service account for all mailboxes in the specific database. Even though the service account is listed as having it, it gets denied access when I attempt. Also, I just noticed this is the exchange 2013 forum. I am running exchange 2010 SP 3. Will this work for that version also? Drdra11

• Edited by drdra11 20 hours 54 minutes ago

Thanks Ed. Will the following command work to force a reset of full access permissions on the database for the service account? Get-Mailbox -Database <Database Name> | Add-MailboxPermission -User <User Who should have Full Access> -InheritanceType All -accessRights FullAccess . I need to reset full access permissions for the service account for all mailboxes in the specific database. Even though the service account is listed as having it, it gets denied access when I attempt. Also, I just noticed this is the exchange 2013 forum. I am running exchange 2010 SP 3. Will this work for that version also? Drdra11

• Edited by drdra11 Wednesday, March 11, 2015 10:27 AM

Thanks Ed. Will the following command work to force a reset of full access permissions on the database for the service account? Get-Mailbox -Database <Database Name> | Add-MailboxPermission -User <User Who should have Full Access> -InheritanceType All -accessRights FullAccess . I need to reset full access permissions for the service account for all mailboxes in the specific database. Even though the service account is listed as having it, it gets denied access when I attempt. Also, I just noticed this is the exchange 2013 forum. I am running exchange 2010 SP 3. Will this work for that version also? Drdra11

• Edited by drdra11 Wednesday, March 11, 2015 10:27 AM

Hi, Drdra 11

I testes your command in my Exchange 2010 environment. It works very well, if there are too many users, it will take some time to run this command.

Best Regards.