2010& 2003 Co-existing - Cannot Remove FullAccess Deny Permission RRS feed

  • Question

  • Hi,

    I am going through the motions of migrating to Exchange 2010 from Exchange 2003.  I currently have both versions co-existing but I have run into a very strange problem.  It seems now that any account or group that had Full Access to mailboxes has now been denied that permission - if I check the Mailbox Rights setting for a user object in Active Directory the FullAccess right has been allowed and denied and I cannot remove it as it thinkg the permission has been inherited from the parent container.  Just wondering if anyone knows why this has happened and how I can rectify this?




    Wednesday, November 16, 2011 11:45 AM


  • Hi dazjw,


    Have your mailboxes moved to Exchange 2010 or still in Exchange 2003?


    In Exchange 2010, you can use this command to remove the deny permission:


    Remove-MailboxPermission –identity Usermailbox –user “Domain Admins” –AccessRight FullAccess –Deny:$True




    Evan Liu


    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com  

    Thursday, November 17, 2011 8:31 AM

All replies