I AM TRYING TO CREATE A SHARED MAILBOX IN MY MS EXCHANGE 2007 CCR SERVER TO BE ACCESSED BY FOUR DIFFERENT ACCOUNTS. THESE FOUR ACCOUNTS ARE CREATED IN A LOGON DOMAIN WHILE THE SHARED MAILBOX IS CREATED IN A RESOURCE FOREST. THE FOUR ACCOUNTS ARE SUPPOSED TO HAVE THE FOLLOWING RIGHTS ON THE SHARED MAILBOX:(1) FULL ACCESS PERMISSION ON THE SHARED MAILBOX (2)SEND AS PERMISSION (3)SEND ON BEHALF PERMISSON TO BE ABLE TO SEND MAILS ON BEHALF OF THE SHARED MAILBOX. COULD SOME ONE GIVE ME A GUIDE PLS

Mailbox-enable the account that is to hold the shared mailbox. New-Mailbox –Name '<User_Name>' –Alias <Alias_Name> –Database NOC-EXMC\<Database> ManagedFolderMailboxPolicy 'Normal 60-Day Retention' Password:(GetCredential).Password –SamAccountName <User_ID> UserPrincipalName <UPN> DisplayName '<Display_Name>' FirstName <Given_Name> -Initials <Initials> LastName <Surname> OrganizationalUnit 'hs.schsd.org/HSD Users/HS Users' ResetPasswordNextLogon:$True Grant mailbox rights to the accounts: Add-ADPermission –Identity '<Shared_mailbox>' –User '<User_ID>' ExtendedRights 'Send-as' Add-MailboxPermission –Identity '<Shared_mailbox>' –User '<User_ID>' AccessRights FullAccess You grant send on behalf of right by logging in to the mailbox with Outlook and using the Delegates option. Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Hi, To create a shared mailbox in the resource forest you simply add the “-Shared” option while creating the mailbox using the New-Mailbox cmdlet. And you can grant the full access and Send As permission using the cmdlets provided by Ed Crowley. If you want to grant the Send on Behalf Permission to the accounts, you can refer the cmdlet Set-Mailbox by adding “-GrantSendOnBehalfTo”. But if you grant the Send As permission and Send on Behalf Permission to the accounts at the same time, it will reflect the Send As permission. Best regards, Serena

Tanx to you Ed Crowley and Serena Li.Your response was really helpful. I have created the shared mailbox in the resource forest. I granted the accounts full access and Send As permission as well as Send On Behalf Permission to the shared mailbox. The challenge i now have is to prevent the individual accounts that have access to the shared mailbox from sending mails as themselves and receiving mails as themselves. I have tried setting to zero the Maximum recipients for the accounts using the Recipient limits in the exchange management console.Also i tried adjusting the storage quotas from the exchange management console to have the Prohibit Send or Prohibit Send and Receive set to zero. Either of these options also prevents the accounts from sending on behalf of the shared mailbox. Could some one gladly guide me plsNWOSU DANIEL

Hi, Based on your description, you would like to the individual accounts who have the permission on the shared mailbox cannot send and receive e-mails using their own e-mail accounts, am I right? To achieve your goal, you can create two transport rules. One is for restricting the individual accounts cannot send e-mails, the other is for restricting the individual accounts cannot receive e-mails. The sample is given below: Transport A: Condition: choose “from people”, you can specify the users by clicking the underlined value. Actions: choose “silently drop the message” or “send bounce message to sender with enhanced status code”. Transport B: Condition: choose “send to people”, you can also specify the users by clicking the underlined value. Action: same with Transport A The transport rule cannot reflect the individual accounts send the e-mail as the shared mailbox, and other people also can send e-mails to the shared mailbox. I have done the test and it works normally. Please feel free to let know if you have any questions. Best regards, Serena

Tanx Serena, the transport rules worked just fine and i have achieved the objective of preventing the accounts with access to the shared mailbox from sending or receiving mails as themselves.BravoNWOSU DANIEL