how to give a user full access to another user's mailbox
I am using Exchange 2007 SP1. I could get success to give permission on 3 mailbox but in 1 mail box i couldn't get success. I did follow same procedure in all mailboxes but others mailboxes are working fine from my mailbox. I can get access of user1 mailbox but i am not able to access of user2. Users access rights: [PS] C:\Windows\System32>Get-MailboxPermission user1 Identity User AccessRights IsInherited Deny -------- ---- ------------ ----------- ---- shaheen.local/MyB... NT AUTHORITY\SELF {FullAccess, Sen... False False shaheen.local/MyB... SHAHEEN\MShaheen {FullAccess} False False shaheen.local/MyB... SHAHEEN\besadmin {FullAccess} True False shaheen.local/MyB... SHAHEEN\SHAHEENSBS$ {ReadPermission} True False shaheen.local/MyB... SHAHEEN\besadmin {ReadPermission} True False shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess} True True shaheen.local/MyB... SHAHEEN\Domain Ad... {FullAccess} True True shaheen.local/MyB... SHAHEEN\Enterpris... {FullAccess} True True shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess} True True shaheen.local/MyB... SHAHEEN\administr... {FullAccess} True True shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess} True False shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess} True False shaheen.local/MyB... SHAHEEN\Exchange ... {ReadPermission} True False shaheen.local/MyB... NT AUTHORITY\NETW... {ReadPermission} True False shaheen.local/MyB... NT AUTHORITY\SYSTEM {FullAccess, Del... True False shaheen.local/MyB... SHAHEEN\Exchange ... {ReadPermission} True False shaheen.local/MyB... SHAHEEN\Exchange ... {ReadPermission} True False shaheen.local/MyB... SHAHEEN\Exchange ... {ReadPermission} True False shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess, Del... True False shaheen.local/MyB... SHAHEEN\administr... {FullAccess, Del... True False shaheen.local/MyB... SHAHEEN\Enterpris... {FullAccess, Del... True False shaheen.local/MyB... SHAHEEN\Domain Ad... {FullAccess, Del... True False [PS] C:\Windows\System32>Get-MailboxPermission user2 Identity User AccessRights IsInherited Deny -------- ---- ------------ ----------- ---- shaheen.local/MyB... SHAHEEN\administr... {FullAccess} False True shaheen.local/MyB... SHAHEEN\Domain Ad... {FullAccess} False True shaheen.local/MyB... SHAHEEN\Enterpris... {FullAccess} False True shaheen.local/MyB... Everyone {ReadPermission} False False shaheen.local/MyB... NT AUTHORITY\ANON... {ReadPermission} False False shaheen.local/MyB... NT AUTHORITY\SELF {FullAccess, Sen... False False shaheen.local/MyB... SHAHEEN\administr... {DeleteItem, Rea... False False shaheen.local/MyB... SHAHEEN\Domain Ad... {DeleteItem, Rea... False False shaheen.local/MyB... SHAHEEN\Enterpris... {DeleteItem, Rea... False False shaheen.local/MyB... SHAHEEN\MShaheen {FullAccess, Del... False False shaheen.local/MyB... SHAHEEN\MAILSERVER1$ {DeleteItem, Rea... False False shaheen.local/MyB... SHAHEEN\Mail Admin {DeleteItem, Rea... False False shaheen.local/MyB... SHAHEEN\kwilson {FullAccess} False False shaheen.local/MyB... SHAHEEN\besadmin {FullAccess} True False shaheen.local/MyB... SHAHEEN\SHAHEENSBS$ {ReadPermission} True False shaheen.local/MyB... SHAHEEN\besadmin {ReadPermission} True False shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess} True True shaheen.local/MyB... SHAHEEN\Domain Ad... {FullAccess} True True shaheen.local/MyB... SHAHEEN\Enterpris... {FullAccess} True True shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess} True True shaheen.local/MyB... SHAHEEN\administr... {FullAccess} True True shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess} True False shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess} True False shaheen.local/MyB... SHAHEEN\Exchange ... {ReadPermission} True False shaheen.local/MyB... NT AUTHORITY\NETW... {ReadPermission} True False shaheen.local/MyB... NT AUTHORITY\SYSTEM {FullAccess, Del... True False shaheen.local/MyB... SHAHEEN\Exchange ... {ReadPermission} True False shaheen.local/MyB... SHAHEEN\Exchange ... {ReadPermission} True False shaheen.local/MyB... SHAHEEN\Exchange ... {ReadPermission} True False shaheen.local/MyB... SHAHEEN\Exchange ... {FullAccess, Del... True False shaheen.local/MyB... SHAHEEN\administr... {FullAccess, Del... True False shaheen.local/MyB... SHAHEEN\Enterpris... {FullAccess, Del... True False shaheen.local/MyB... SHAHEEN\Domain Ad... {FullAccess, Del... True False in which shaheen.local/MyB... SHAHEEN\MShaheen is my user account from where i can able to see user1 mailbox but not user2 mailbox. Challenging Problem: My all folders admin rights deleted due to viruses.i cant access any folder
October 7th, 2009 2:03pm

The Permission looks Good to me. Did you granted permission using GUI or Shell? It could be due to replication. You may have to wait some time and then give a try to access his Mailbox. May be you can re-add his mailbox as secondary mailbox in Outlook.Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
Free Windows Admin Tool Kit Click here and download it now
October 7th, 2009 2:15pm

Hi,Can you try this again step by step. http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/exchange-2007-sp1-mailbox-management-part2.htmlTry force replicating your domain controllers. Raj
October 7th, 2009 4:21pm

Rajnish, I followed same procedure. It works for 4 mailbox but not working for 1. Even i have impersonate user2 permission but still same error. Challenging Problem: My all folders admin rights deleted due to viruses.i cant access any folder
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2009 3:02pm

Surprised. Is there some thing different about this mail box. Any permission or group membership??Raj
October 8th, 2009 3:23pm

User1 - this is the good mailbox, right?shaheen.local/MyB... SHAHEEN\MShaheen {FullAccess} False FalseFull Access - Deny is false for shaheenUser2 - this is the "bad" mailbox, right?shaheen.local/MyB... SHAHEEN\administr... {FullAccess} False TrueFull Access - Deny is TRUE for shaheenCould that be the problem?NO - see what Vinod points out below.
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2009 4:12pm

User1 - this is the good mailbox, right?shaheen.local/MyB... SHAHEEN\MShaheen {FullAccess} False FalseFull Access - Deny is false for shaheenUser2 - this is the "bad" mailbox, right?shaheen.local/MyB... SHAHEEN\administr... {FullAccess} False TrueFull Access - Deny is TRUE for shaheenCould that be the problem?user name is SHAHEEN\MShaheen not SHAHEEN\administr...Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
October 8th, 2009 4:24pm

May sound silly, but try removing the permission off of user 2, wait a while for the Information Store (IS) to flush its cache (2 hours or restart IS) and then try re-adding it back. Sometimes things seem to get stuck somewhere even though it displays correctly via a GUI and removing and readding gets things working.MVP | MCSE:M | MCITP: Enterprise Messaging Administrator | MCTS: OCS + Voice Specialization | http://www.shudnow.net
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2009 6:56pm

Hi,After checking from the permission list,I find that some different between these configuration. I recommend you to remove permission for MShaheen and then re-grant full permission for this account.For User 2:shaheen.local/MyB... SHAHEEN\MShaheen {FullAccess, Del... False FalseFor User 1:shaheen.local/MyB... SHAHEEN\MShaheen {FullAccess} False FalseRegards,Xiu
October 9th, 2009 6:38am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics