How to give full access in mailbox to a user in another domain?

Hi,

I am working in a migration-project where we migrates all users from one domain to another. The old domain is running Exchange 2010 and the new domain is running Exchnage 2013. We have a number of room mailboxes still in the old domain and I want to give some users in the new domain full access to these room-mailboxes. I have tried to give users in the new domain full access by using get-mailbox -identity nameofmailbox | add-mailboxpermission -AccessRights Fullaccess,Externalaccount -user domain\username. But I am still not able to manage the mailbox, I cannot create and delete events directly in the rooms calendar and so on.

Any tips? How can I give permissions to users in the new domain so that they can manage the rooms calendar dir

March 4th, 2015 11:59am

Hi Thor-Egil,

you can run a cmdlet like
add-mailboxpermission localmailbox -AccessRights Fullaccess,Externalaccount -user username -domaincontroller foreign.domain.dc

for a mailbox in your forest with a user username from the other domain and foreign.domain.dc as domain controller of the other domain. A trust relationship with the other domain is required.

Please let me know if it worked for you.

Regards,
Martin

Free Windows Admin Tool Kit Click here and download it now
March 4th, 2015 12:08pm

Hi and thanks for your answer. I think this is the same as I have done by giving this command:

get-mailbox -identity nameofmailbox | add-mailboxpermission -AccessRights Fullaccess,Externalaccount -user domain\username

After giving the command I can see that the user in the new domain should have full access, but still I cannot create or delete events directly in the calendar.

March 4th, 2015 12:26pm

Hi,

Configuration of permissions in a multiple forest topology relies on the correct configuration of forest trusts and global address list (GAL) synchronization for the creation of linked mailboxes.

Please make sure the forest trust and GAL synchronization have been deployed in your cross forest environment. Then the user name or resource mailbox can be resolved from GAL and check whether the issue persists.

Personal suggestion, we can complete the mailbox migration and make sure all mailboxes are moved to the new domain, then manage the mailbox full access permission for user mailbox and room mailbox. Additionally, here is a similar thread for your reference:

https://social.technet.microsoft.com/Forums/en-US/a2e23759-9fd8-4d5c-83b9-c7642fb57466/resource-mailboxes-in-the-cross-forest-migration?forum=exchangesvrdeploylegacy

Regards,

Free Windows Admin Tool Kit Click here and download it now
March 5th, 2015 4:18am

I think if you need to work with other domain out of your forest, yo need to configure first a Federation trust

this link can help you : https://technet.microsoft.com/en-us/library/jj657462%28v=exchg.150%29.aspx

Regards, Jesus

March 6th, 2015 7:24pm

Hello,

Good Day..

You can follow the below article

http://exchangeserverpro.com/exchange-server-2010-room-mailboxes-step-by-step-guide/

Regards,

Praveen


----------------------------------------------------------------------

Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts @ Techrid.com

Free Windows Admin Tool Kit Click here and download it now
March 6th, 2015 9:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics