[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 443
  • Last Modified:

Granting mailbox access rights to a group or user at OU level in Active Directory

In Exchange 2003 we have granted a few administrators total access to all users mailboxes. This works fine, giving access to a group on the database object.  We also have a requirement that the management of certain departments can access their respective staff's mailboxes.  AD has Department OUs setup so I was trying to give a management Global group full access over the OU hoping it would give full access to the mailboxes within but this does not work.

Does anyone know if and how I can use OUs to grant mailbox access rights to a group for the users within without having to set the permission on each user object?

1 Solution
Mailbox permissions aren't controlled by Group Policy, you have to set them on the mail object. There are tools that can do the leg work for you - admodify.net is the first one that springs to mind.


Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now