How to add multiple users to "Full Access Permissions"
Hi All, The Service Desk here have raised an interesting problem, I think its a bug but am interested to know if anyone else has the problem or whether it is peculiar to our environment. We are running Ex2007SP1 with UR2 (Version: 08.01.0278.002) and are finding problems adding multiple users when using the "Manage Full Access Permissions" wizard. The process seems to complete correctly, but when you check the permissions on the mailbox, only the first user has been added. This means that each user needs to be added individually or has to be scripted through the shell. lt's pretty annoying, and although I've trawled through the usual forums looking for another example, I can't find anyone else who has experienced this. Anyone else experiencing this or know of a fix ? Cheers
May 25th, 2009 5:54am

Hi,First of all you should try to install the latest update: RU8:http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e1f5c8b2-c4f2-4eba-849b-e464d4f2869cRegards,Zoltnhttp://www.clamagent.org - Free Antivirus for Exchange http://www.it-pro.hu http://emaildetektiv.hu
Free Windows Admin Tool Kit Click here and download it now
May 25th, 2009 7:49am

hi,create new security group add users as a member to the group that you want to assing permission. and then add this group to mailbox security and assign permissions.regards,Mumin CICEK | Exchange - MVP | www.cozumpark.com | www.mumincicek.com
May 25th, 2009 10:18am

Issue description: when attempting to grant Full Access permission of a mailbox to multiple users via EMC, the wizard has completed successfully, but the permission only added to first added user after checked the permission on the mailbox I have tested in the lab (Exchange 2007 SP1 RU2), the issue cant be reproduced Check info: 1. How many users do you try to add in once? 2. Quote: check the permissions on the mailbox, only the first user has been added How did you check the permissions, via EMS or EMC? 3. Quote: each user needs to be added individually or has to be scripted through the shell Does it mean that multiple users can be added via EMS? 4. Please reproduce the issue, and see if theres any error/ warning event in the application log 5. Please create a new test mailbox, see if we can reproduce the issue on new mailbox 6. Please install the management tool on a client PC, see if the multiple users can be added in newly installed EMC, if yes, the issue would be caused by management tool itself 7. Please also run ExBPA against exchange for a health check Notes: Mumims suggestion can be an option if we have too many users need to be added Resources: How to Install the Exchange 2007 Management Tools Installing Exchange 2007 Management Tools On a 32 Bit Operating System
Free Windows Admin Tool Kit Click here and download it now
May 26th, 2009 9:44am

I have the exact same problem. However, in my case it only happens sometimes and not for the first user added butfor a random one.Try doing the same thing but when you are about to check if it worked, do it by the powershell or wait a little bit. A couple of times I checked it and only one user was added but after a minute (without doing nothing) they were all there.http://LetsExchange.blogspot.com
May 27th, 2009 8:45pm

Issue description : when attempting to grant Full Access permission of a mailbox to multiple users via EMC, the wizard has completed successfully, but the permission only added to first added user after checked the permission on the mailbox I have tested in the lab (Exchange 2007 SP1 RU2), the issue cant be reproduced Check info : 1. How many users do you try to add in once? 2. Quote : check the permissions on the mailbox, only the first user has been added How did you check the permissions, via EMS or EMC? 3. Quote : each user needs to be added individually or has to be scripted through the shell Does it mean that multiple users can be added via EMS? 4. Please reproduce the issue, and see if theres any error/ warning event in the application log 5. Please create a new test mailbox, see if we can reproduce the issue on new mailbox 6. Please install the management tool on a client PC, see if the multiple users can be added in newly installed EMC, if yes, the issue would be caused by management tool itself 7. Please also run ExBPA against exchange for a health check Notes : Mumims suggestion can be an option if we have too many users need to be added Resources : How to Install the Exchange 2007 Management Tools Installing Exchange 2007 Management Tools On a 32 Bit Operating System Hi - thanks for your reply. I've tested again this morning - answers to your questions below. 1. Attempted to add ten users 2. Permissions were originally checked via EMC, but EMS shows the same result : get-mailboxPermission -identity MCTestFault Identity User AccessRights -------- ---- ------------ .../U... NT AUTHORITY\SELF {FullAccess, ReadPermission} .../U... AU\mludynia {FullAccess} 3. Not sure about this, I don't know how to add multiple users using the shell. Using an array with the add-mailboxpermission command generates an error 4. Nothing logged in EventViewer 5. All of todays tests have been completed on a new mailbox MCTestFault 6. We are using vista here, but EMC is installed on a number of servers and they all have the same issue 7. I'll run this today and see if it throws anything up. Nuno - you are correct, it's not the first user but a random one from the list
Free Windows Admin Tool Kit Click here and download it now
May 28th, 2009 5:33am

We have the same issue, but it is just an ADreplication delay. After adding multiple users permissions it can take up to 20 mins for all the changes to show on the users mailbox
May 28th, 2009 12:18pm

Sattman,As Mumin already suggested. Adding a security group to allow multiple user access to some mailbox or resource is the best way to do what you want. You should be able to that using the cmdlet Set-MailboxPermission and then add the desired rights to the mailbox/resources. I would also wait till the replication occurs across the forest. Just to confirm if this is not an issue with replication you can use LDP or ADSIEDT and connect to more than 2 doain controllers and check the USN values of the modified mailbox (here modified means, modified permissions).MMilind Naphade | MCTS:M | http://www.msexchangegeek.com
Free Windows Admin Tool Kit Click here and download it now
May 28th, 2009 3:34pm

I think you're on to something there. I've checked again this morning, and as well as all of the inherited permissions now being visible I'm able to add multiple users. Strange - I'll monitor today to see exactly how long it takes to update the permissions. Security groups have already been discussed here - but I'm not excited by the prospect of creating a group for each resource mailbox that we have......
May 29th, 2009 3:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics