How can I give administrator full mailbox access in exchange if deny Send As and Recieve As is ticked and greyed out.

Hello

I'm having some trouble in Exchange Server 2003, I want my administrator account to have full access to All Mailboxes (for backup reasons) but although it has full rights across the domain and Full Administrative Access over exchange. I still can't get access to all mailboxes. (the way i've tested this is to log on to the terminal server and add the mailboxes of others into outlook - however i cannot expand their mailboxes) if I right click the mailbox store in Exchange System Manager and select security I have Deny ticked on both Send as and Recieve As and these ticks are also greyed out so I can't remove them. Is there a way to get full control over the Mailbox store and remove these ticks?

Thanks

Iconsultci
IconsultCIAsked:
Who is Participating?
 
rakeshmiglaniCommented:
Open adsiedit.msc
Expand Configuration container
Expand Services
Expand Microsoft Exchange
Over here you would see your Exchange ORG
Check the permissions over here for your account. The deny would be checked here, so you can uncheck it for your account. But if your account is a member of any other group and that group has a deny set then the same would apply to your account as well.
Check the permissions at the ORG level and then the Administrative group and server level and your server and then the mailbox store level.
0
 
rakeshmiglaniCommented:
How to assign service account access to all mailboxes in Exchange Server 2003
http://support.microsoft.com/kb/821897/en-us
0
 
rakeshmiglaniCommented:
How do I grant the administrator(s) (or any other user) full mailbox right on Exchange 2000/2003 mailboxes?
http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
IconsultCIAuthor Commented:
Thanks

I've actually looked at this article before and this part is quite relevant to me:

After you have made this change, you may still see unavailable Deny and Allow permissions assigned to your account. The unavailable permissions indicate that by inheritance you have been denied permission, but that you have inherited permissions at this level. In the Windows permissions model, explicitly granted permissions override inherited permissions. Note that an explicit Allow at a lower level permission overrides an explicit Deny from a higher level permission only on the single object where the override is set, not on that object's child objects. This prevents you from granting yourself permissions on a server to gain access to each database; you must grant permissions on databases individually.

I'm not sure exactly where i've inherited denied permissions?
0
 
amaheshwariCommented:
Go to ESm and then right click on your Org then Delegate Control and add administrator for Exchange Full Administrator .Now you will be having all the Rights on exchange .
0
 
IconsultCIAuthor Commented:
Go to ESm and then right click on your Org then Delegate Control and add administrator for Exchange Full Administrator .Now you will be having all the Rights on exchange .

I've tried this but it's greyed out

Comment from rakeshmiglani

That's great, thanks very much!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.