locked
2010& 2003 Co-existing - Cannot Remove FullAccess Deny Permission RRS feed

  • Question

  • Hi,

    I am going through the motions of migrating to Exchange 2010 from Exchange 2003.  I currently have both versions co-existing but I have run into a very strange problem.  It seems now that any account or group that had Full Access to mailboxes has now been denied that permission - if I check the Mailbox Rights setting for a user object in Active Directory the FullAccess right has been allowed and denied and I cannot remove it as it thinkg the permission has been inherited from the parent container.  Just wondering if anyone knows why this has happened and how I can rectify this?

    Thanks,

    D

     

    Wednesday, November 16, 2011 11:45 AM

Answers

  • Hi dazjw,

     

    Have your mailboxes moved to Exchange 2010 or still in Exchange 2003?

     

    In Exchange 2010, you can use this command to remove the deny permission:

     

    Remove-MailboxPermission –identity Usermailbox –user “Domain Admins” –AccessRight FullAccess –Deny:$True

     

    Thanks,

     

    Evan Liu

     

    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com  

    Thursday, November 17, 2011 8:31 AM
    Moderator

All replies