Answered by:
2010& 2003 Co-existing - Cannot Remove FullAccess Deny Permission

Question
-
Hi,
I am going through the motions of migrating to Exchange 2010 from Exchange 2003. I currently have both versions co-existing but I have run into a very strange problem. It seems now that any account or group that had Full Access to mailboxes has now been denied that permission - if I check the Mailbox Rights setting for a user object in Active Directory the FullAccess right has been allowed and denied and I cannot remove it as it thinkg the permission has been inherited from the parent container. Just wondering if anyone knows why this has happened and how I can rectify this?
Thanks,
D
Wednesday, November 16, 2011 11:45 AM
Answers
-
Hi dazjw,
Have your mailboxes moved to Exchange 2010 or still in Exchange 2003?
In Exchange 2010, you can use this command to remove the deny permission:
Remove-MailboxPermission –identity Usermailbox –user “Domain Admins” –AccessRight FullAccess –Deny:$True
Thanks,
Evan Liu
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com
- Marked as answer by Evan LiuModerator Friday, November 25, 2011 9:50 AM
Thursday, November 17, 2011 8:31 AMModerator
All replies
-
Hello Dazjw,
Please use below articles to get and remove the full mailbox permissions:
Hope this helps.
Thanks & Regards, Kottees RWednesday, November 16, 2011 12:52 PM -
Thanks for this, although I could not see where these articles mentioned removing a Deny permission. I need the admins to have Full Mailbox Access rights which is already ticked, but I need the Deny setting removed - how do I remove the Deny setting without completely removing the right? (see screenshot showing tick in allow and deny)
Thanks,
D
Wednesday, November 16, 2011 2:39 PM -
Hi dazjw,
Have your mailboxes moved to Exchange 2010 or still in Exchange 2003?
In Exchange 2010, you can use this command to remove the deny permission:
Remove-MailboxPermission –identity Usermailbox –user “Domain Admins” –AccessRight FullAccess –Deny:$True
Thanks,
Evan Liu
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com
- Marked as answer by Evan LiuModerator Friday, November 25, 2011 9:50 AM
Thursday, November 17, 2011 8:31 AMModerator -
Hello dazjw,
Any updates on this issue?
Thanks,
Evan Liu
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com
Tuesday, November 22, 2011 2:36 AMModerator