Granting Mailbox Permissions Before an ExMerge

Issue: Granting Mailbox Permissions before an ExMerge

Affects: Exchange 2000/2003

Solutions to the issue:

• Use the following procedure to grant access to an Exchange 2000 or an Exchange 2003 mailbox:

Note: You must have the appropriate Exchange administrative permissions to do so.

1. Start Active Directory Users and Computers.

2. On the View menu, ensure that the Advanced Features check box is selected.

Note: This is not necessary on Exchange Server 2003 because of the fact that the Exchange Advanced tab is exposed by default.

3. Right-click the user whose mailbox you want to give permissions to and choose Properties.

4. On the Exchange Advanced tab, click Mailbox Rights.

5. Notice that the Domain Admins and Enterprise Admins have both been given Deny access to Full Mailbox access.

6. Click Add, click the user or group who you want to have access to this mailbox, and then click OK.

7. Be sure that the user or group is selected in the Name box.

8. In the Permissions list, click Allow next to Full Mailbox Access, and then click OK.

9. Click Ok all the way out.

Warning: If the Group or User name list is empty and you only see one line with the name of SELF – do NOT touch the permission settings before you read SELF Permission on Exchange Mailboxes.

Note: If the purpose of granting such access is to permit use of the EXMERGE utility (see Delete Messages from Mailboxes by using EXMERGE for an example of such a requirement), grant Receive As permissions. You can also grant Full Control permissions if you want complete access.

• Use the following procedure to grant access to Exchange 2000 or an Exchange 2003 mailbox found on a specific mailbox store:

Note: You must have the appropriate Exchange administrative permissions to do so.

1. Start Exchange System Manager.

2. Drill down to your server object within the appropriate Administrative Group. Expand the server object and find the required mailbox store within the appropriate Storage Group. Right-click it and choose Properties.
3. In the Properties window go to the Security tab.

1. Click Add, click the user or group who you want to have access to the mailboxes, and then click OK.

1. Be sure that the user or group is selected in the Name box.

1. In the Permissions list, click Allow next to Full Control, and then click OK.

Note: Make sure there is no Deny checkbox selected next to the Send As and Receive As permissions.

3. Click Ok all the way out.

• Use the following procedure to grant access to Exchange 2000 or an Exchange 2003 mailboxes found on a specific server:

Note: You must have the appropriate Exchange administrative permissions to do so.

1. Start Exchange System Manager.

2. Drill down to your server object within the appropriate Administrative Group. Right-click it and choose Properties.
3. In the Properties window go to the Security tab.

1. Click Add, click the user or group who you want to have access to the mailboxes, and then click OK.

1. Be sure that the user or group is selected in the Name box.

1. In the Permissions list, click Allow next to Full Control, and then click OK.

Note: Make sure there is no Deny checkbox selected next to the Send As and Receive As permissions.

3. Click Ok all the way out.

Note: It might take some time before the changes you’ve made will take effect. The amount of time needed is influenced by the number of domain controllers, Global Catalogs and site replication schedules and intervals. On one domain with one site containing multiple domain controllers it might take up to 15 minutes before you can begin using these new permissions. On single servers that are also DCs you can speed up the process by restarting the Information Store service.