Resource Forest and Mailbox Permissions via Groups RRS feed

  • Question

  • Hi,

    As per the title I'm looking for any articles/whitepapers etc... explaining how mailbox permissions granted via a group "work" in a resource forest environment.

    Our scenario is:

    UserForest, containing ILM FIM migrated accounts.

    MailForest, Exchange 2010, disabled user accounts.

    Shared mailbox access is granted to a mail enabled Universal Security Group in the MailForest. The disabled MailForest user account is in the mail enabled Universal Security Group.

    By virtue of the LinkedMasterAccount value this works. My query is how this works?

    Tuesday, September 24, 2013 11:01 AM


  • Hi,

    A linked mailbox is a mailbox associated with an external account. The resource forest scenario is an example of when you would want to associate a mailbox with an external account. In a resource forest scenario, user objects in the Exchange forest have mailboxes, but the user objects are disabled for logon. You must associate these disabled user accounts in the Exchange forest with enabled user objects in the external accounts forest.

    For the relationship between the linked user account used to access the linked mailbox and the disabled user account in the Exchange resource forest associated with the linked mailbox, please refer to the below document.


    Hope this helps.

    Best regards,

    • Marked as answer by cara chen Friday, October 4, 2013 4:50 AM
    Thursday, September 26, 2013 6:13 AM