Firstly, this mailbox was migrated from 2003 to 2010 recently. I want to configure the calendar on this particualr shared mailbox so that everyone in the oganization can see appointments but only one or two people for a specific department can make appointments on the calendar. As I noted this is a 'user mailbox' object as opposed to a room resource. Do I need to convert this to a room resource to make this work? Or is there a way to do this as is? If I do attempt to convert this mailbox to a room will I loose any data currently inside of the mailbox and/or calendars? I don't think so but just wondering. Any help on this would be apprecieted.

You can leave it as a regular mailbox, set the permissions for default to reviewer access. Than you can add the other 2 users as editor. James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Thanks for the reply James, sorry I forgot to mention that this is the way it's setup already however other users, outside of the two listed below with {Editor} rights, are able to set appointments on this calendar. [PS] C:\Windows\system32>Get-MailboxFolderPermission -Identity departmentmailbox:\calendar RunspaceId : 7bb0cd78-de63-43be-87d3-3c0f322ef893 FolderName : Calendar User : Default AccessRights : {Reviewer} Identity : Default IsValid : True RunspaceId : 7bb0cd78-de63-43be-87d3-3c0f322ef893 FolderName : Calendar User : Doe, Jane AccessRights : {Editor} Identity : Doe, Jane IsValid : True RunspaceId : 7bb0cd78-de63-43be-87d3-3c0f322ef893 FolderName : Calendar User : Doe, John AccessRights : {Editor} Identity : Doe, John IsValid : True

That should not be the case, are you sure you don't mistakenly have full mailbox access for everyone via receive-as on the DB?James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Perhaps, how can I verify that I do not have it configured?

Start with quering the DB, if its not there, than you need to work up to the server leve, org level etc. [PS] C:\Windows\system32>get-mailboxdatabase |get-adpermission | where-object {$_.extendedrights -like `receive-as'} | select user,extendedrightsJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Thanks, do I replace "user" with the alias of the mailbox in question? Would it be easier if I just changed this from a mailbox to a resource. I'm flummoxed as to why it isn't as simple and setting the default user to veiw and the othe rpeople to editor and it working, and I'm not familiar enough to know if when I kick off that command will it effect performance, because it looks like that's gonna search thru the entire mail db (50,000+ mailboxes) and AD (1,000,000+ objects).

Run the command exactly as is. At this point I wouldn't worry about changing to a resource mailbox without first investigating why all users have rights to modify the calendar. If you have inadvertenly set full permission on everyones mailbox for everyone than that will carry over to the resource mailbox. Also double check this mailbox in emc, full mailbox permissions and see if you notice non standard groups having permissions. James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

The command returned nothing, it just popped back to the command prompt. Everything looks ordinary in 'manage full permissions'.

Strange, for testing see if those others (not the 2 you explicitly added editor rights to) can open the shared mailbox in outlook.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Yes, I, with no permissions seton this mailboxs' calendar, can open this calendar and even set appointments on it. How can I disallow anyone other than whoever I specify to make appointments on a calendar ?

Yes, I, with no permissions seton this mailboxs' calendar, can open this calendar and even set appointments on it. How can I disallow anyone other than whoever I specify to make appointments on a calendar ?