Hi I understand there is a concept of an Exchange resource forest, i.e. a user's AD account is in one forest, and the Exchange mailbox is in another. http://technet.microsoft.com/en-us/library/aa996010(EXCHG.80).aspx For this example, ForestA is the domain holding the AD accounts, and ForestB holds the Exchange mailbox. We have a user named Manager and a user named PA, each have their own mailbox. I want to grant the PA full mailbox access to the Manager's mailbox. But how would I accomplish this in a scenario where the AD account and mailbox were in two forests? Do I assign the permission on the Manager's AD account in ForestA, or the disabled Manager's account in ForestB, and why?

You would grant rights to the real user. Becasue that's the way it works. On Fri, 13 Aug 2010 19:36:09 +0000, Chuck_P2101 wrote: > > >Hi > >I understand there is a concept of an Exchange resource forest, i.e. a user's AD account is in one forest, and the Exchange mailbox is in another. > >http://technet.microsoft.com/en-us/library/aa996010(EXCHG.80).aspx > >For this example, ForestA is the domain holding the AD accounts, and ForestB holds the Exchange mailbox. > >We have a user named Manager and a user named PA, each have their own mailbox. > >I want to grant the PA full mailbox access to the Manager's mailbox. But how would I accomplish this in a scenario where the AD account and mailbox were in two forests? Do I assign the permission on the Manager's AD account in ForestA, or the disabled Manager's account in ForestB, and why? Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Hello Ed Sorry - which account is the 'real' user? Thanks!

Hi Chuck, As ED refered, that means, give the full access permission to the account in the account forest. You could run this cmdlet: add-mailboxpermission -identity manager -user accountforestFQDN\PA -accessrights fullaccess Regards! Gavin