Adding a admin user to full access permission to all newly created mailboxes
Anyone know of a way to add a user to an exchange database or server so that this user automatically gets full access permission to any newly created mailbox. Needed for a migration from imap server to exch 2010..
April 28th, 2011 6:43pm
This command will provide that access:
Add-ADPermission -Identity "Mailbox Database" -User "User-Account" -ExtendedRights Receive-As
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 8:16pm
the recieve-as doesnt work
April 28th, 2011 8:18pm
the recieve-as doesnt work
What error do you get?
Mike Crowley
Check out My Blog!
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 10:11pm
ummm this was a "jail" V's "Gaol" error if you get my meaning...meaning me be from australia
April 28th, 2011 10:25pm
Also this doesnt like the user im adding in the "manage full access permissions" list
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 10:27pm
Can you do it in EMC?
April 29th, 2011 1:19am
yeah thats the easy bit, i can also use the get-mailbox | set-mailboxpermission cmdlet as well, but when you get up too more than 1000 mailboxes it takes too damn long and hard to rememger to do it
Need an account with full access permission to mailboxes so when can use it to migrate from a IMAP mail server
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2011 1:50am
@Brenton
1. You may want to use the "AccessRights FullAccess" and Generialall permissions.
http://blog.xiquest.com/2010/01/grant-full-access-to-all-mailboxes-in-exchange-2010/
2.
http://exchangepedia.com/2007/06/how-to-grant-full-mailbox-access-permission.html
Sukh
April 29th, 2011 5:05am
Receive As should work, as that provides the access. It is what is used to provide access to BESADMIN for Blackberry, which is what I culled the command from.
However if you have granted the permission and immediately tried to use it, then I wouldn't expect it to work, as Exchange caches permissions. If you are trying to use a permission constantly it can be two or three hours before the change is effective, unless
you restart the information store.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2011 6:17pm
the recieve-as doesnt work
What error do you get?
Mike Crowley
Check out My Blog!
Again, what error do you get? Is there a problem with the command, or are you saying recieve-as doesn't grant you access into the mailbox?
Mike Crowley | MVP
My Blog --
Planet Technologies
April 29th, 2011 7:40pm
Don't get an error as such anymore now i have the spelling the correct way around. Just the user i add to full permissions doesnt appear in the "full access permissions" on the mailbox itself
Thus it'a hard to tell who has full access to that mailbox from the EMC
Free Windows Admin Tool Kit Click here and download it now
May 1st, 2011 6:50pm
Ok. Try this
1. export all the mailboxes to csv by going to EMS and type get-mailbox -server servername -resultsize unlimited | get-mailboxstatistics displayname | export-csv "c:\temp\export.csv"
2. In the spreadsheet add another column called user and add the account you want to have full access
3. go back to EMS, type in import-csv "c:\temp\export.csv" | foreach{add-mailboxpermission -id $_.id -user $_.user -accessrights "FullAccess"}
The above command is from 2007 so I hope it still exist in 2010.
May 1st, 2011 9:14pm
> Just the user i add to full permissions doesnt appear in the "full access permissions" on the mailbox itself
full permission will appear when the user access to the mailbox.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
May 3rd, 2011 3:32am
Ok. Try this
1. export all the mailboxes to csv by going to EMS and type get-mailbox -server servername -resultsize unlimited | get-mailboxstatistics displayname | export-csv "c:\temp\export.csv"
2. In the spreadsheet add another column called user and add the account you want to have full access
3. go back to EMS, type in import-csv "c:\temp\export.csv" | foreach{add-mailboxpermission -id $_.id -user $_.user -accessrights "FullAccess"}
The above command is from 2007 so I hope it still exist in 2010.
Not the best solution when you have 1000's of mailboxes to do everytime
May 3rd, 2011 6:32pm