Perhaps someone can help me out. From the results of an earlyer thread I made the following construction: - Created a new Ad user account with a mailbox and named it after two sales users. - Gave full control permissions for the 2 Sales users on the new mailbox. - Configured in outlook the 2 users to use the new mailbox as there default. Additional info: The 2 sales users have no mailbox on there AD account. They work as a team for the same customers on separate days so it was execly what they wanted. So far no problem, until others want to share mailbox folders so they can be monitored while on vacation. If others give permissions to the new AD user account (the shared mailbox) the 2 sales users can't access the shared mailboxfolder. The 2 sales users can't be selected from the list by others to grand permissions, witch is logical, they don't have a mailbox of there own. Aldo they access there central mailbox and work as that user, they can't be selected or grand permissions to other users shared mailbox folders. I hope someone has the answer... Kind regards, Rico

If you want those 2 sales users to be able to access other user's mailbox with the new AD user account (shared mailbox), you need to have the two sales users configure their outlook profile and use the shared mailbox AD user account credentials to access. If possible perform the following steps and it will work. 1. Created a new Ad user account with a mailbox and named it after two sales users - This is fine. 2. While configuring the profile in outlook, use the new AD user account credentials instead of the two sales users credentials. This will enable the permissions added for shared mailbox in other user's mailbox folders permissions. The permissions given on mailbox folders are checked against the AD account associated with that mailbox added and not to the mailbox itself

I don't understand exactly but if you're trying to grant mapi folder level permissions to users without mailboxes access doesn't work via mapi or owa like it did in 2003, you will need to grant full mailbox rights or create mailboxes for them.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

I don't understand exactly but if you're trying to grant mapi folder level permissions to users without mailboxes access doesn't work via mapi or owa like it did in 2003, you will need to grant full mailbox rights or create mailboxes for them.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Yes, you cannot grant folder permission to the AD users. Maybe you can follow Rajitha's suggestion, use one user mailbox to instead of shared mailbox (two users use the same credential to login the same mailbox), this way you can use that mailbox to open other mailbox folders. Thanks, EvanEvan Liu TechNet Community Support

Thanks for the replies. I think setting up a mailbox for each sales user and set the security settings to shared folders the way we want. Then I'll hide the individual from the GAL so no mail can be send to the individual sales user. Well...., they are mail enabled, but not found in the GAL and that is what users see. Reason for doing so: Sales user work an a Remote desktop environment with Wyse Terminals and it is not allowed to log in twice with the same user account. The second (same) user thats logged in would take over the session of the first logged in user, because it is the same account in that situation. The other option to just give full permission on the mailbox of others (if in any way possible) is unwanted deu to "counselor" email folders by some users that would also become accessible. Thank you all very much for your input. Rico