Announcement

Collapse
No announcement yet.

Give domain user account FULL access to all mailboxes?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Give domain user account FULL access to all mailboxes?

    I think with Exchange 2003 you could make your domain user account a member of the domain admin group and then open outlook and open additional mailboxes. Is this possible with exchange 2007?

    I would like my standard domain user account to have full access to all user mailboxes. At the minute i'm having to assign myself full access rights to invididual mailboxes

    Thanks

  • #2
    Re: Give domain user account FULL access to all mailboxes?

    It's the same procedure for 2000 or 2003, by default domain admin's have explicit deny.

    See here for adding to the whole mailbox store, or to a particular server and all the mailboxes on it.

    http://www.petri.com/grant_full_mail..._2000_2003.htm

    Shaun

    Comment


    • #3
      Re: Give domain user account FULL access to all mailboxes?

      Before you do this ensure that you have documented in your policies that this is allowed and is standard company policy that users are aware of. If not you could be entering a world of hurt in terms of privacy issues.
      BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
      sigpic
      Cruachan's Blog

      Comment


      • #4
        Re: Give domain user account FULL access to all mailboxes?

        Hmmmm you've got me thinking now.

        I have created an acceptable usage policy but haven't got users to sign this yet.

        I could put this in the e-mail section, do you have any references I could use?

        Thanks for this.

        Comment


        • #5
          Re: Give domain user account FULL access to all mailboxes?

          Not sure where in the world you are based, but UK template here:

          http://www.businesslink.gov.uk/bdotg...type=RESOURCES

          Including monitoring.

          Shaun

          Comment


          • #6
            Re: Give domain user account FULL access to all mailboxes?

            Hi

            have you tried the following command to add the group? I havent had a chance to try it yet


            Get-Mailbox 'resourcemailbox' | Add-mailboxPermission -user 'domain\group'
            -Accessright Fullaccess (You could use the -whatif switch to see the results)


            Regards,

            Comment


            • #7
              Re: Give domain user account FULL access to all mailboxes?

              First - you were incorrect in thinking that Exchange 2003 allowed a domain admin access to all mailboxes. That has never been the case unless the domain has been hacked around with.
              Exchange actually has a specific deny on Administrators having access to the mailboxes.

              Personally I do not want or ever had access to all mailboxes in any of the environments I have worked on. It is not necessary to do my job. If I need to access a mailbox, then I get the user's permission, then I grant the permissions I need. I do what I need to do, then remove the permissions.

              At all times I presume I have no permissions to the mailbox and check before doing anything.
              Having permissions to all mailboxes would save 30 seconds - but saves a whole lot of hurt when problems occur with "Missing" email (as users always think someone else is to blame).

              Simon.
              --
              Simon Butler
              Exchange MVP

              Blog: http://blog.sembee.co.uk/
              More Exchange Content: http://exchange.sembee.info/
              Exchange Resources List: http://exbpa.com/
              In the UK? Hire me: http://www.sembee.co.uk/

              Sembee is a registered trademark, used here with permission.

              Comment

              Working...
              X