We help IT Professionals succeed at work.

Granting mailbox access rights to a group or user at OU level in Active Directory

edsp8 asked
Medium Priority
Last Modified: 2012-08-14
In Exchange 2003 we have granted a few administrators total access to all users mailboxes. This works fine, giving access to a group on the database object.  We also have a requirement that the management of certain departments can access their respective staff's mailboxes.  AD has Department OUs setup so I was trying to give a management Global group full access over the OU hoping it would give full access to the mailboxes within but this does not work.

Does anyone know if and how I can use OUs to grant mailbox access rights to a group for the users within without having to set the permission on each user object?

Watch Question

Expert of the Year 2007
Expert of the Year 2006
Mailbox permissions aren't controlled by Group Policy, you have to set them on the mail object. There are tools that can do the leg work for you - admodify.net is the first one that springs to mind.


Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.