Full Access given to Security Distribution Group has added the group the delegates for every mailbox
Hi I found a thread that with same error, perhaps the steps of the solution there could help you Add a resourcedelegate to a user mailbox http://social.technet.microsoft.com/Forums/en-IE/exchange2010/thread/3b647a47-abab-4438-8c16-56117d5ebbcc First confirm the mailboxes you would like to modify is a user mailbox or a resource mailbox. Hope that helps CheersZi Feng TechNet Community Support
September 18th, 2012 5:26am

Hello, I've given the group of mailbox administrators (Mail-enabled Universal Security group) GenericAll Permissions at database level for every database. This way they have full access to all mailboxes. But now this group has been added to the resourcedelegates list on every mailbox. How is this possible and how can I remove this resoucedelegate without deleting the correct delegates Powershell set-calendarprocessing for user gives error: "resourcedelegates can only be set on resource mailboxes" Environment: Exchange 2010 SP2 DAG Windows 2008 R2 Please advise FrederikFrederik
Free Windows Admin Tool Kit Click here and download it now
September 18th, 2012 9:32am

Hi, these are all user mailboxes. In the forum thread you send is mentionned to that it is impossible to add resourcedelegates to user mailboxes. I get te same error. Figured out where these delegates come from; We are migrating from Lotus Notes, Quest Notes Migrator picked them up from Acces control List in Notes and added them to the delegates and not to the ACE's. Any idea how we can clean this resourcedelegate field without removing the correct delegates? regards FrederikFrederik
September 18th, 2012 11:35am

Hi Helles, Do you mean that after you grant the full access permission, the administrator would be listed in the value of the target mailbox's AD attribute msExchDelegateListLink ? If so, this could be normal and we could manually remove them in ADSI Edit one by one(Or you could follow the steps below to check if the administrators are listed in the same place, if so, you could remove them and see if the Quest Notes Migrator would still reconganize them as delegate): Open AdsiEdit.msc. Expand Default naming context to CN=Users. Select the user account whose mailbox is being displayed as an additional mailbox in Outlook. Right-click this account and click Properties. Select the msExchDelegateListLink attribute and click Edit. Select the account you want to remove (this is the account who sees the additional mailboxes displayed in Outlook) and click Remove. Click OK twice. Or we could use ADModify to clear them on multiple users: This tool could be downloaded from here: ADModify.NET http://admodify.codeplex.com/releases/view/6065 Steps to remove the value: 1. Start AD Modify andselect Modify Attributes 2. Select you Domain from the Domain List 3. Press the green button to populate the Organizational Unit (OU) list 4. Select the OU where your users are located 5. Click on Add to List -> 6. Highlight all the users you want to modify 7. Click Next 8. Go to the Custom tab 9. Check mark Make a customized attribute modification 10. In the Attribute Name type msExchDelegateListLink 11. In the Attribute Value type null 12. Click on Go! Thanks, Andy
Free Windows Admin Tool Kit Click here and download it now
September 20th, 2012 2:02am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics