Comments on: Add-mailboxpermission vs Add-AdPermission Part 1

By: Exchange Genie

Exchange Genie — Thu, 16 Jul 2009 02:10:10 +0000

Wow NT 4 still out there huh

By: greg

greg — Thu, 09 Jul 2009 12:43:37 +0000

I have a NT 4.0 domain with users that have mailboxes in an AD domain hosting exchange 2007. ADMT has migrated and disabled the accounts, primary accounts for exchange 2007 mailboxes, from the NT 4.0 domain.( These accounts will be used in future , post migration).

I migrated from exchange 5.5 – Exchange 2003 – Exchange 2007. All the mailboxes migrated are set as linked mailboxes and work just fine. any NEW mailboxes are set as user mailboxes however I need to change them to linked however :

I have tried to create a linked mailbox via the shell and gui tools but cannot. The GUI Exchange management console does not show the trusted NT 4.0 domain, andf I cannot therefore select a user account for the linked mailbiox. The add-mailbox shell command requires a AD domain controller (-linkeddomaincontroller).

Does Exchange 2007 not supported trusted NT 4.0 domains ?

By: Michael

Michael — Wed, 10 Jun 2009 17:26:34 +0000

Hey very nice blog!! Man .. Beautiful .. Amazing .. I will bookmark your blog and take the feeds also…

By: Jason

Jason — Sat, 30 May 2009 10:06:21 +0000

I used the cmdlet get-mailbox | Add-MailboxPermission -Identity {$_.Name} -AccessRights FullAccess -User “testuser”
And it worked fine giving me permission to all mailboxes.

But now when i am trying to remove these permissions using:
get-mailbox | Remove-MailboxPermission -Identity {$_.Name} -AccessRights FullAccess -User “testuser”
It does not work. I am still able to open other user’s mailbox ad I still my SID in the EMC under “Manage Full Access Permission”

Running Exchange server 2007 and I am in all the required admin groups – Exchange Recepient, Exchange Organization, Dns admin, Domain Administrators,etc..
Can someone help me out here? Thanks

By: Real

Real — Wed, 11 Mar 2009 02:11:53 +0000

> John R
> I would like the same but just with read or viewing rights

I’ve been searching for a “read-only” access to a shared mailbox for quite a while. Most threads are generally ending like this one – with a question on how to deny users the right to delete – and then no answer…

I simply can’t believe there’s no way to achieve this, and yet, didn’t find a solution either.

Any help out there?

By: John R

John R — Mon, 02 Mar 2009 15:57:00 +0000

What if I want to allow a user just to view emails on another user’s mailbox? -fullaccess allows a user to add the mailbox in Outlook and delete emails if they want to. I would like the same but just with read or viewing rights

By: Sysadmin

Sysadmin — Tue, 05 Aug 2008 14:05:00 +0000

Hi,
Thanks for the lead – since the exchange administrator is also a domain administrator , he was specificly denied. We also are multi domain (politicly)
this solved it
Get-MailboxDatabase | SetAdPermission -User domain\user -AccessRights extendedright -ExtendedRights “Send As”
And the same for “Receive As”

By: john h.

john h. — Thu, 12 Jun 2008 17:18:00 +0000

Thanks Shane,

Can you delegate the change permission to a security group as well?

Thanks

John

By: Exchange_Genie

Exchange_Genie — Fri, 06 Jun 2008 01:47:00 +0000

Let me doublecheck but I believe as along a you delegate the change permission to a user they will be able to run the command and modify the perms.

By: John H.

John H. — Thu, 05 Jun 2008 22:08:00 +0000

Shane,

Your stated by default, only members of the Exchange Organization Admin Role could run the add-mailbox permission.

Is there a way to modify the permissions to allow Exchange Recipent Administrators to use this command?

We are currently in a multidomain environment where the domain administrators are also exchange admins for users in their domain and have the Exchange Recipient Administrator Role assigned. The goal is to have the domain admins to have full access to manage mailboxes only in their respective domains.

Thanks