Hi We need to allow a specific administrator full access to all mailboxes on our EX2010 system. We have 10 seperate databases. I've found different variations of commands to allow full access but want to clarify the best way to do this. I've just run the following: Get-MailboxDatabase -identity “[mailbox database name]” | Add-ADPermission -user [username] -AccessRights GenericAll This is accepted OK (real names obviously added) but when I check the full access permissions on a mailbox on the database, the user I added isn't there. I've also seen reference to the switch "add-mailboxpermission" Can someone advise the correct command and syntax we should be using ? Will the permissions apply to any new or moved (from EX2003) users ? Thanks

you need to set the permissions on each mailbox, this can be done on all mailboxes with one command. I have a post regarding this on my blog, have a look and see if it helps you: http://msundis.wordpress.com/2010/07/07/manage-full-access-permissions-on-mailboxes-in-exchange-2010/ The permissions will not be applied on new mailboxes, you will have to run the command again. But you might want to add a where and list only the users added since the date when you last ran the command.Martin Sundstrm | Microsoft Certified Trainer | MCITP: Enterprise Messaging Administrator 2007/2010 | http://msundis.wordpress.com

Hi Thanks for that. I think I remember seeing your blog in my previous searches. So there's no way to have an administrator automatically have access to all exisiting and new mailboxes ? What is the difference between running the command I mentioned above and your method ? Is it just a case of where the permissions are granted ? i.e. the command I used only gives the user full access on one database (or however many you run it against) ? Thanks

You are correct, there is no way to automatically set the permissions on all new mailboxes, except for running a scheduled script. As far as I know you can't add Full Access permissions to a database.Martin Sundstrm | Microsoft Certified Trainer | MCITP: Enterprise Messaging Administrator 2007/2010 | http://msundis.wordpress.com

Hi Jarweb, Any update for your issue? Regards! Gavin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.