How do I set the isinherited flag on a service account with Full Access?
Hi, I would like to set the isinherited flag to true for a service account that i gave full access to all mailboxes using powershell. This command changed the isinherited from true to false:- Get-StorageGroup -Identity "XCH007\*" | Get-MailboxDataBase | get-mailbox | where-object {$_.Database -like "XCH007\*"} | add-mailboxpermission -AccessRights fullaccess -user serviceaccount Have searched on this topic but not seen a clear answer yet...
June 27th, 2009 1:49am

What are you trying to accomplish here?Do you want an account to have full mailbox permission on every mailbox. You do this by granting fuilmailboxaccess as you do above but easier is to set the permission oneach mailbox database, with that you dont need to set new permissions on new mailboxes.http://technet.microsoft.com/en-us/library/aa996343.aspxThere is no reason to have permissions set on mailbox objects to Inherited since there is no object below mailbox objects to inherit to.lasse at humandata dot se, http://anewmessagehasarrived.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
June 27th, 2009 11:48am

Hi,Do you want to grant all mailbox full access permission to a serviceaccount?The command I think should only work for those exsiting mailboxes, for these futher mailbox we may need to run the command again.Besides, please try to add receive as permission.(Add-ADPermission)[Quota]Granting Receive As permission to another user for a mailbox allows that user to log on to the mailbox and have access to the contents of the entire mailbox. The Receive As permission is an extended right for mailbox databases and storage groups in ActiveDirectory as well as mailboxes. Therefore, you can grant a user the Receive As permission for an entire mailbox database or storage group. When you grant a userReceive As permission for an entire mailbox database, that user can log on to all mailboxes that are stored on the mailbox database and access their contents.Understanding Mailbox Permissionshttp://technet.microsoft.com/en-us/library/bb123879.aspxRegards,Xiu
June 29th, 2009 12:59pm

<!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-parent:""; margin:0cm; margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman"; mso-fareast-language:EN-US;} @page Section1 {size:595.3pt 841.9pt; margin:1.0cm 1.0cm 1.0cm 1.0cm; mso-header-margin:35.45pt; mso-footer-margin:35.45pt; mso-paper-source:0;} div.Section1 {page:Section1;} --> Was just looking to flip the isinherited flag from false to true, but realised this is just cosmetic as the service account appears in all new mailboxes anyway. Thanks for the help and suggestions.
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2009 1:44pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics