I have applied this Get-MailboxDatabase -identity "SERVERNAME\First Storage Group\Mailbox Database" | Add-ADPermission -user administrator -AccessRights GenericAllWhen I look in the EMC the user is listed as having full access. In outlook web access the open other users mailbox option says you do not have permission to open this mailbox.I go back to the EMC and the user is listed under mange full access permissions, add a differnet user to full access and select apply. Then the mailbox is able to open.Get access denied while tring to migate my users to Windows Live and in Outlook web Access in open other users mailbox in outlook until You apply the setting in the EMC. Using Exchange 2007 SP1 rollup 9

The Administrator user is a special case and has explicit deny ACEs against it having full access. This is also true for any user in the domain admins security group.If you want a full access user, create an account expressly for that purpose that is not a domain admin and grant it access.

I did create a new user for this purpose that is not a domain admin and granted it access.

Oh, so you're saying that it works if you do it through EMC, but does not appear to work if you do it through EMS?

The user is listed as having full access through the EMC on all mailbox users after running the cmd. But I get access denied in OWA and in Windows Live Migation when logged in as that user. I add a different user (any account) so I can click apply. Then I have full access with the user that was listed in the EMC has already having access.

What happens if you wait 30 minutes rather than taking the second action? Is it just a matter of cached credentials, or does it never change until you take the second action with EMC?

I have reproduce this 3 days now and have rebooted the servers . Its strange that the EMC lists the user as having full access but making a change so apply is available to click resolves the issue. I can open the mailbox as (additional mailbox) in Microsoft Outlook 2007 and send/receive mail. Not sure why OWA and Windows Live would have an issue until I clik apply in the EMC.It does not change until you take the second action with EMC

did you restart the information store?Full time IT consultant since 1998 mainly on Exchange\ISA\AD MCSE NT4.0,2000/2003, CCNA MCITP: Enterprise Messaging Administrator 2007/2010 MCT since 2001

I did reboot the mailbox, client/hub servers.get-mailbox -database "SERVERNAME\First Storage Group\Mailbox Database" | add-mailboxpermission -user "user" -Accessright Fullaccess -InheritanceType allGet-MailboxDatabase -identity "SERVERNAME\First Storage Group\Mailbox Database" | Add-ADPermission -user "user" -AccessRights GenericAll