The Sunbelt Exchange forum is a great place to ask questions like this. :-)

Regardless, the GFI instructions are wrong, at least as you've quoted them.

The easiest thing to do is open the Exchange management Console, find 
Account-B, then click on "Manage Full Access Permission" in the Action pane, 
and give Account-A rights.

And yes, you need to either "restart-service msexchangeis" or wait about two 
hours for the permissions cache to expire. No reboot required.

In re: the Domain Admin question, explicitly assigned permissions override 
inherited permissions.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-----Original Message-----
From: [email protected] [mailto:[email protected]] 
Sent: Wednesday, February 17, 2010 11:53 AM
To: NT System Admin Issues
Subject: Exch2007 permissions issue

Haven't had much help from other sources with this issue so I thougth I'd try 
here.

Environment:  Single Exchange 2007 server

I need to be able to access another user's mailbox via OWA in order for this 
particular software (GFI Mail Archiver) to work properly. 

When I use Account-A to logon to OWA 2007, I try to access another user's 
mailbox (Account-B) and I receive this error: 

"You do not have permission to open this mailbox. For access or for more 
information, contact technical support for your organization. " 

According to the documentation from GFI, I am supposed to enter this from the 
Exchange 2007 command prompt: 

Add-ADPermission -Identity "Mailbox Database" -User "domain\UsernameJOE" 
-AccessRights GenericAll 


I did that... but when logged into OWA as UsernameJOE, the error still
occurs when trying to access another user's email via OWA. 

Really stuck here and could use some help. Can someone tell me what I
should try next? Single Exchange 2007 server with MBX/CAS/HUB roles. 

Note - since making that change, the Exchange server has not been rebooted
(I dont think it needs to be?), and also, the user account in question is a
Domain Admin (is this possibly an issue because of inherited deny
permissions??)


Thanks. 
J

--------------------------------------------------------------------
myhosting.com - Premium Microsoft(r) Windows(r) and Linux web and application
hosting - http://link.myhosting.com/myhosting



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to