locked
Adding a admin user to full access permission to all newly created mailboxes RRS feed

  • Question

  • Anyone know of a way to add a user to an exchange database or server so that this user automatically gets full access permission to any newly created mailbox. Needed for a migration from imap server to exch 2010..
    Thursday, April 28, 2011 10:38 PM

Answers

  • This command will provide that access:

    Add-ADPermission -Identity "Mailbox Database" -User "User-Account" -ExtendedRights Receive-As

    Simon.


    Simon Butler, Exchange MVP
    Blog | Exchange Resources | In the UK? Hire Me.
    • Proposed as answer by Jason LJS Tuesday, May 3, 2011 6:46 AM
    • Marked as answer by BrentonFoggo Thursday, May 5, 2011 10:38 PM
    Friday, April 29, 2011 12:11 AM
  • > Just the user i add to full permissions doesnt appear in the "full access permissions" on the mailbox itself

    full permission will appear when the user access to the mailbox.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by BrentonFoggo Tuesday, May 3, 2011 10:27 PM
    Tuesday, May 3, 2011 7:27 AM

All replies

  • This command will provide that access:

    Add-ADPermission -Identity "Mailbox Database" -User "User-Account" -ExtendedRights Receive-As

    Simon.


    Simon Butler, Exchange MVP
    Blog | Exchange Resources | In the UK? Hire Me.
    • Proposed as answer by Jason LJS Tuesday, May 3, 2011 6:46 AM
    • Marked as answer by BrentonFoggo Thursday, May 5, 2011 10:38 PM
    Friday, April 29, 2011 12:11 AM
  • the recieve-as doesnt work
    • Marked as answer by BrentonFoggo Thursday, May 5, 2011 10:37 PM
    • Unmarked as answer by BrentonFoggo Thursday, May 5, 2011 10:38 PM
    Friday, April 29, 2011 12:14 AM
  • the recieve-as doesnt work

    What error do you get?

    Mike Crowley
    Check out My Blog!

    Friday, April 29, 2011 2:05 AM
  • ummm this was a "jail" V's "Gaol" error   if you get my meaning...meaning me be from australia

    Friday, April 29, 2011 2:19 AM
  • Also this doesnt like the user im adding in the "manage full access permissions" list

     

    Friday, April 29, 2011 2:21 AM
  • Can you do it in EMC?
    Friday, April 29, 2011 5:14 AM
  • yeah thats the easy bit, i can also use the get-mailbox | set-mailboxpermission cmdlet as well, but when you get up too more than 1000 mailboxes it takes too damn long and hard to rememger to do it

     

    Need an account with full access permission to mailboxes so when can use it to migrate from a IMAP mail server

    Friday, April 29, 2011 5:45 AM
  • Friday, April 29, 2011 9:00 AM
  • Receive As should work, as that provides the access. It is what is used to provide access to BESADMIN for Blackberry, which is what I culled the command from.

    However if you have granted the permission and immediately tried to use it, then I wouldn't expect it to work, as Exchange caches permissions. If you are trying to use a permission constantly it can be two or three hours before the change is effective, unless you restart the information store.

    Simon.


    Simon Butler, Exchange MVP
    Blog | Exchange Resources | In the UK? Hire Me.
    Friday, April 29, 2011 10:12 PM
  • the recieve-as doesnt work

    What error do you get?

    Mike Crowley
    Check out My Blog!


    Again, what error do you get?  Is there a problem with the command, or are you saying recieve-as doesn't grant you access into the mailbox?

    Mike Crowley | MVP
    My Blog -- Planet Technologies

    Friday, April 29, 2011 11:36 PM
  • Don't get an error as such anymore now i have the spelling the correct way around. Just the user i add to full permissions doesnt appear in the "full access permissions" on the mailbox itself

     

    Thus it'a hard to tell who has full access to that mailbox from the EMC

    Sunday, May 1, 2011 10:44 PM
  • Ok. Try this 

    1. export all the mailboxes to csv by going to EMS and type get-mailbox -server servername -resultsize unlimited | get-mailboxstatistics displayname | export-csv "c:\temp\export.csv"

    2. In the spreadsheet add another column called user and add the account you want to have full access 

    3. go back to EMS, type in import-csv "c:\temp\export.csv" | foreach{add-mailboxpermission -id $_.id -user $_.user -accessrights "FullAccess"}

    The above command is from 2007 so I hope it still exist in 2010.

    Monday, May 2, 2011 1:09 AM
  • > Just the user i add to full permissions doesnt appear in the "full access permissions" on the mailbox itself

    full permission will appear when the user access to the mailbox.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by BrentonFoggo Tuesday, May 3, 2011 10:27 PM
    Tuesday, May 3, 2011 7:27 AM
  • Ok. Try this 

    1. export all the mailboxes to csv by going to EMS and type get-mailbox -server servername -resultsize unlimited | get-mailboxstatistics displayname | export-csv "c:\temp\export.csv"

    2. In the spreadsheet add another column called user and add the account you want to have full access 

    3. go back to EMS, type in import-csv "c:\temp\export.csv" | foreach{add-mailboxpermission -id $_.id -user $_.user -accessrights "FullAccess"}

    The above command is from 2007 so I hope it still exist in 2010.


    Not the best solution when you have 1000's of mailboxes to do everytime
    Tuesday, May 3, 2011 10:27 PM