Testing a 2003 / 2010 exchange co-existence at the moment. On 2003 at the organisation level we have a 3rd party archive service account set that has full permissions to everyones mailbox for archiving purposes. However, when a mailbox is moved to 2010, it doesn't keep these inherited permissions as there are no such things as storage groups in 2010. Is there a way to move these permissions across to 2010 or set an account with full permissions for all mailboxes in 2010 easily which will continue to apply for new mailboxes as they are created?

You could set it at the admin group, server, store or mailbox level. I would ask the vendor if they support Exchange 2010 and for their recommended permissionsettings.

Vendor supports 2010 but they don't have much experience with it so have advised that the journal account needs access to all mailboxes but don't know how to set it in 2010 (which isn't confidence inspiring!) It is still in the test phase whilst people learn 2010 here so we were wondering how to do it. It's all Role Based groups now which we understand but which role has full mailbox rights by default (if a role such as that even exists without creating a new role).

Hi, You will have to add the permission based on Database level in Exchange 2010. This can be done by following cmd. Get-MailboxDatabase | Add-ADPermission -User "Username" -AccessRights ExtendedRight -ExtendedRights For more information on Extended rights refer to below link: http://technet.microsoft.com/en-us/library/bb124403.aspx For more information on Role based permission refer to tese links: http://mscerts.net/application_server/exchange%202010%20permissions%20model%20(part%201).aspx http://www.msexchange.org/articles_tutorials/exchange-server-2010/management-administration/exchange-2010-role-based-access-control-part1.htmlNagaraj N