Is there any way to set MAPI permissions using Exchange Management Shell? I want to script giving user rights to specific mailbox folders without going through Outlook. Thanks.

Yes there are: Like you can add FullAccess and Read permissions using Add-MailboxPermission and you can add send-as permission using Add-ADPermission PS commads. There are respective Remove commands too. Regards,Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

Links to above mentioned commands: Add-MailboxPermission Add-ADPermission Regards,Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

If you are looking for a per folder powershell command: http://technet.microsoft.com/en-us/library/dd298062.aspx Add-MailboxFolderPermission or pfdavadmin/ExFolders: http://msexchangeteam.com/archive/2009/12/04/453399.aspx Exchange, meet ExFolders

Ok, so it looks like the add-mailboxpermission would work so that I can give ready only access to an entire mailbox right? Add-MailboxFolderPermission looks like an Exchange 2010 command, I can't find it in 2007. Is that correct? Also, on a side note, when I add permissions using the add-mailboxpermission command, it doesn't seem to show in AD. Are these permissions stored within the Exchange DB itself?

Ok, so it looks like the add-mailboxpermission would work so that I can give ready only access to an entire mailbox right? Add-MailboxFolderPermission looks like an Exchange 2010 command, I can't find it in 2007. Is that correct? Also, on a side note, when I add permissions using the add-mailboxpermission command, it doesn't seem to show in AD. Are these permissions stored within the Exchange DB itself? Ok, so it looks like the add-mailboxpermission would work so that I can give ready only access to an entire mailbox right? Yes. Add-MailboxFolderPermission looks like an Exchange 2010 command, I can't find it in 2007. No. Works on both, with same set of parameters, thats why it is mentioned as only latest ex2010 command. While Add-MailboxPermission and add-adpermission have some difference in set of perameters, thats why they are tagged and posted separately. Regards, Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

It looks like Add-MailboxPermission has an attribute for ReadPermission, but not read. I want to provide read-only access. Can I do this with Exchange 2007, or only 2010?

Assign the Reviewer right

Reviewer is only available on the add-mailboxfolderpermission, which isn't available in Exchange 2007. For add-mailboxpermission, these are the choices I have: FullAccess SendAs ExternalAccount DeleteItem ReadPermission ChangePermission ChangeOwner

ThankNeed Help

Ok, gotcha. I wuold use pfdavadmin then in that case. Its not a command line, but you cna still assign per mailbox folder permissions centrally assuming the account you are using has full mailbox access to those accounts.

Reviewer is only available on the add-mailboxfolderpermission, which isn't available in Exchange 2007. For add-mailboxpermission, these are the choices I have: FullAccess SendAs ExternalAccount DeleteItem ReadPermission ChangePermission ChangeOwner For add-mailboxpermission u can use ReadPermission which will give read only permission. If you give ReadPermission + DeleteItem together then user will be able to read and delete the item. Regards,Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

Ok, so last question (I think). Do I need to have an Exchanage 2010 mailbox server to use this, or can I use this command successfully if I have the Exchange 2010 tools installed somewhere?

Ok, so last question (I think). Do I need to have an Exchanage 2010 mailbox server to use this, or can I use this command successfully if I have the Exchange 2010 tools installed somewhere? Yes u can do this task from Management tools installed on some other computer as long as logged in user has the RBAC permission to perform that task. Permissions are mentioned on the command's online page for each command. Regards,Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com