Hi guys, when I try to share a mailbox folder with a "Mail Enabled Universal Security Group" (which is the type that is supposed to work for this) it does not work - I can share using individual users - but not group. Any thoughts/ideas? Cheers.

How are you doing it?Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

If you are using outlook 2007 and see a red circle against the group while adding to permissions tab, then you may try to edit the AD object for the group and save it again. Wait for OAB to be updated. Source: http://blogs.msdn.com/b/pepeedu/archive/2010/08/26/how-to-upgrade-a-universal-distribution-group-to-a-universal-security-group.aspx

Hi guys, thanks for your replies - sorry to be so long about responding (been off sick :)). To respond to first reply I have tried on Outlook 2003 and 2010, and both logged on to a user with full access permissions, and to that user. For the second response some groups show a red circular symbol, but not this group; it just doesn't seem to apply when you try to connect to the mailbox where individual user rights do... Cheers.

Hi glassSaAB, Could I confirm why you want to give the mailbox folder permission to the DL? Per my known, we could gave the mailbox permisson to other mailbox user, DL without mailbox, so how to access the shared folder. If I misunderstand your issue, please tell me. Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Gavin, currently we have full control for the AD group that needs access to this mailbox; but the manager of the department wants only some users to have full control, and the rest to have only reviewer access; if I do it on a per-user basis then if a new user in the department would then need to be given reviewer access to each folder individually causing a high ongoing administrative overhead. Cheers.

Hmm, I see my reply is gone, OK... The reason I wanted to give folder permissions to a DL is because of ongoing administrative overhead if done on a user by user basis; ie a new user starts and needs reviewer access to this mailbox; if on a by user basis every time this happens I would need to add this right to each folder within the mailbox I want them to be able to access - and if the number of folders increases over time as they usually do then this could go from the current 30 or so folders to over a hundred. If I can do by DL then it only needs to be done once, any folders added by default get the permissions of the parent, and I only need to add a new user to DL... Cheers. (Oops last reply reappeared; will leave this post in case it clarifies further)...

Hi glassSaAB, Per my known, we could not use the add-mailboxpermission for DL, if you want to achieve your target, I would use the scripts. Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Scripts? Do tell... Cheers.

Hi glassSAB, Sorry for the last reply, it seems wrong, I have made a test again as below: add-mailboxpermission -identity UserA -user DG/SG -accessright fullaccess All work well, so what about your operation, any error information? Please also update your exchange for the latest version, mine is exchange 2010 sp1 RU2 Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Gavin, full access permission is not a problem, it is the more granular permissions given through the client that I am having trouble with. As to upgrading exchange that is planned but other projects are ahead of that so it won't be right away. Thanks for your reply though. I have been somewhat snowed lately so sorry for not checking back sooner. Cheers.