Comments on: Grant Full Access to All Mailboxes in Exchange 2010

By: Think Property

Think Property — Sun, 15 Jan 2012 22:18:00 +0000

MS – why have you taken away our GUI for so much stuff?!

By: crnx

crnx — Fri, 07 Oct 2011 09:27:00 +0000

I just tried this on a new Exchange 2010 SP1 installation and it worked perfectly:

1. create a new user group, e.g. “Exchange Database Administrators”
2. grant mailbox access:

Get-MailboxDatabase | Add-ADPermission -user
“Exchange Database Administrators” -ExtendedRights Send-As,
Receive-as, ms-Exch-Store-Admin -InheritanceType All

3. add user to the group
4. open any users mailbox via OWA, Outlook File>Open>Other Users Folder or by creating a new primary outlook profile, just as you like.

By: exchM5

exchM5 — Fri, 23 Sep 2011 22:36:00 +0000

This command partially works for me. After running the command for my user account, I can open any mailbox in that store from Outlook by File>Open>Other Users Folder. But what I am unable to do is create and open a new outlook profile of another user while I’m logged on. To be clear, the profile is created but when I try to launch it, I get prompted for credentials so I type my creds and they are rejected.

By: shai Chikorel

shai Chikorel — Wed, 03 Aug 2011 10:24:00 +0000

Thanks. help for me

By: crnx

crnx — Mon, 18 Jul 2011 06:56:00 +0000

correction: its (AdminCount >0)

By: crnx

crnx — Mon, 18 Jul 2011 06:54:00 +0000

This one should do the trick:

Get-MailboxDatabase | Add-ADPermission -user
“USER/GROUP” -ExtendedRights Receive-as, ms-Exch-Store-Admin -InheritanceType All

If you still don’t get access, remove any permissions you’ve set before. If you set too many permissions your access will be denied.

Be sure that the account you are going to open has no AdminSDHolder attribute set. (AdminCount >1). If it’s set inherited permissions won’t be applied.

By: Bigehead

Bigehead — Fri, 15 Jul 2011 19:08:00 +0000

I don’t think this works anymore. I set it, but I can’t open mailboxes even though I have full access. Does this still work for anyone?

By: Jimmy

Jimmy — Thu, 23 Dec 2010 02:52:00 +0000

or….why not just add a user to the exchange server group?

By: RapidSSL Online

RapidSSL Online — Tue, 21 Dec 2010 09:20:00 +0000

Hiii, I faced a problem after i ran the script. It showed a dialog box displaying a message that The SSL Webserver is blocking the connection to the mail-box. Please try again. What should i do? Thanks in advance.

By: Matt

Matt — Fri, 26 Nov 2010 14:51:00 +0000

How would I remove these permissions? I ran the above command, but now need to remove myself from everyones mailbox… Would I just run the above command with Remove-ADPermission instead?