Hello, My CEO wants me to setup an HR account that would be able to access everyones Exchange 2007 account, to check their email. I hear it can be done but can't seem to find it in the Knowledge Base, for Exchange 2007 that is.... Any help will be greatly appreciated, thanks. Allen Damrow

Hi Allen, To grant permission on all mailboxes on a server you need to run below command Get-MailboxDatabase -Server "ServerName" | Add-ADPermission -User "HRUserAccount" -ExtendedRights Receive-As Note: This will not effective until cache refreshes, which is by default two hours interval or restart Exchange Information Store service to make it effective immediately. Reference: Exchange 2007 - How to Allow Mailbox Access

Al, one other piece of advice on the "god" account, get it in writing that this is what HR and the CEO wants. Even just an e-mail should be acceptable. If your users have not signed a statement that essentially consents to this type of monitoring, it could be ugly for your company. A lot of organizatoin ask their employees to sign a contract saying that "yes, we know that all company property is really company property and therefore consent to monitoring by management/HR is given." My $0.02 worth