Securing Room Mailboxes
Hello Im trying to setup the following. I would like to implement Room resource mailboxes. However what I want are only certain people in the origination able to book the rooms. Everyone can see the room but not make changes. Additionally Id like the people that will be able to book rooms in a security group in AD so I only need to mess with exchange permissions once.
Is this possible and if so how?
Thanks
November 21st, 2008 10:28pm
Hi,
You can have a look at setting up delegates for the box but as far as I can find this can only setup delegates by specifying users and not groups.
For a manual on how to setup delegates check this site:
http://technet.microsoft.com/en-us/library/bb124973.aspx
Regards,
Johan
blog: www.johanveldhuis.nl
Free Windows Admin Tool Kit Click here and download it now
November 22nd, 2008 11:55pm
Hi,
You are able to run the following command to only allow the member of a group to book the room:
Set-mailboxcalendarsettings resource mailbox allrequestinpolicy $false allbookinpolicy $false Bookinpolicy group
Set-MailboxCalendarSettings
http://technet.microsoft.com/en-us/library/aa996340.aspx
Or you are able to have the delegate of the resource mailbox to logon the mailbox by using OWA and change the Resource Booking configuration through UI.
More Information:
Resource scheduling in Exchange Server 2007
http://msexchangeteam.com/archive/2007/05/14/438944.aspx
Mike
November 24th, 2008 8:19am
Still doesn't seem to like it I've tried both a security and distribution group and both return with:
Set-MailboxCalendarSettings : Object "room-bookers" could not be found. Pleasemake sure that it was spelled correctly or specify a different object. Reason:The recipient room-bookers is not of the expected type.At line:1 char:28+ Set-mailboxcalendarsettings <<<< "Swan Island Pacific Trails Room" -allrequestinpolicy $false -allbookinpolicy $false -Bookinpolicy "room-bookers"
However if I call out someone by name it's not a problem. What I'm trying to avoid here is having to put a list of 20 people on 40 rooms, referencing a group would be much easier to maintain the permissions on.
Thanks
Free Windows Admin Tool Kit Click here and download it now
November 24th, 2008 5:20pm
Ok so Exchange is the devil when it comes to these things Here is an overview of what I am trying to do.
I want to create a room-mailbox. I want to assign a group of people room-owners as having full control over it so that they can see the calendar and book meetings without question. I would like them to be able to open the mailbox / calendar from within outlook. I would like this group also set as the delegates on the mailbox. I would also like anyone outside of this group able to book meetings but it must be approved by the room-owners group.
November 24th, 2008 9:59pm
Hi,
I have local tested the command in my previous post. I am able to add a Mail-enabled Universal Security Group by using the command
Set-mailboxcalendarsettings resource mailbox allrequestinpolicy $false allbookinpolicy $false Bookinpolicy group
Therefore, I suggest you create a new group to test whether the issue still persists.
Mike
Free Windows Admin Tool Kit Click here and download it now
November 25th, 2008 12:26pm