Grant Full Access to All Mailboxes in Exchange 2010

Here’s a little time-saving tip for working with mailboxes in Exchange 2010. Normally if you need full access to another user’s mailbox in Exchange 2007/2010 you would highlight their mailbox in the Exchange Management Console and the choose “Manage Full Access…” from the action pane. You would have to do this individually for each mailbox that you wanted to manage full access permissions for.

Here’s an easier way to grant full access to a user for every mailbox in a mailbox database. Just edit the bracketed fields below and paste the cmdlet in the Exchange Command Shell:
Get-MailboxDatabase -identity “[mailbox database name]” | Add-ADPermission -user [username] -AccessRights GenericAll
Voila! You now have full access to all mailboxes in the selected database. This even applies to new accounts created after you run the cmdlet.
No trackbacks yet.
Exchange 2010: Simplify OWA URL
December 16, 2009 - 13:17
Tags: Exchange 2010, IIS 7, OWA, Simplify URL
Posted in Networking, Unified Messaging | View Comments
Exchange Outlook Web Access is a wonderful feature, but directing users to access it on their own can be a patience testing proposal if you’re not using URL redirection.
For example: you’ve installed Exchange 2010, configured all the appropriate roles, including the CAS (Client Access Server; responsible for OWA), and deserve a hero’s welcome, or [...]
Comments are closed.
March 30, 2010 - 18:18
Hello,
We moved our CFO mailbox from exchange 2003 to exchange 2010 and his secy had full permission for the mailbox. Now, after the move though she is being shown as having full access but it is not working and through EMC, when I try to manage her permission, i am getting the error
“Some controls are not valid. changes in the user/group list are required or remove permissions.”
Any thoughts
March 30, 2010 - 19:58
I occasionally run into issues like these, in which the user account in question may have previously been a member of a protected group on the domain, which in effect disables security permission inheritance on the account. After the upgrade, the account has not inherited the new Exchange 2007/2010 permissions. My suggestion would be to check both your CFO's and their secy's accounts and ensure that they are configured to inherit permissions in ADUC.
For more info, check this out: http://support.microsoft.com/default.aspx/kb/81...
April 19, 2010 - 10:00
Does not work for me..
Opening mailboxes with outlook works, but if i try to open the mbx via another tool (in this case: single mailbox recovery) the access is denied.
Any suggestions?
May 12, 2010 - 22:44
Can you tell me where to find the Mailbox Database Name? thank you
May 17, 2010 - 07:10
get-mailboxdatabase will show you any availible mailboxdatabase