[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3900
  • Last Modified:

How can I give administrator full mailbox access in exchange if deny Send As and Recieve As is ticked and greyed out.

Hello

I'm having some trouble in Exchange Server 2003, I want my administrator account to have full access to All Mailboxes (for backup reasons) but although it has full rights across the domain and Full Administrative Access over exchange. I still can't get access to all mailboxes. (the way i've tested this is to log on to the terminal server and add the mailboxes of others into outlook - however i cannot expand their mailboxes) if I right click the mailbox store in Exchange System Manager and select security I have Deny ticked on both Send as and Recieve As and these ticks are also greyed out so I can't remove them. Is there a way to get full control over the Mailbox store and remove these ticks?

Thanks

Iconsultci
0
IconsultCI
Asked:
IconsultCI
  • 3
  • 2
1 Solution
 
rakeshmiglaniCommented:
How to assign service account access to all mailboxes in Exchange Server 2003
http://support.microsoft.com/kb/821897/en-us
0
 
rakeshmiglaniCommented:
How do I grant the administrator(s) (or any other user) full mailbox right on Exchange 2000/2003 mailboxes?
http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
0
 
IconsultCIAuthor Commented:
Thanks

I've actually looked at this article before and this part is quite relevant to me:

After you have made this change, you may still see unavailable Deny and Allow permissions assigned to your account. The unavailable permissions indicate that by inheritance you have been denied permission, but that you have inherited permissions at this level. In the Windows permissions model, explicitly granted permissions override inherited permissions. Note that an explicit Allow at a lower level permission overrides an explicit Deny from a higher level permission only on the single object where the override is set, not on that object's child objects. This prevents you from granting yourself permissions on a server to gain access to each database; you must grant permissions on databases individually.

I'm not sure exactly where i've inherited denied permissions?
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 
amaheshwariCommented:
Go to ESm and then right click on your Org then Delegate Control and add administrator for Exchange Full Administrator .Now you will be having all the Rights on exchange .
0
 
rakeshmiglaniCommented:
Open adsiedit.msc
Expand Configuration container
Expand Services
Expand Microsoft Exchange
Over here you would see your Exchange ORG
Check the permissions over here for your account. The deny would be checked here, so you can uncheck it for your account. But if your account is a member of any other group and that group has a deny set then the same would apply to your account as well.
Check the permissions at the ORG level and then the Administrative group and server level and your server and then the mailbox store level.
0
 
IconsultCIAuthor Commented:
Go to ESm and then right click on your Org then Delegate Control and add administrator for Exchange Full Administrator .Now you will be having all the Rights on exchange .

I've tried this but it's greyed out

Comment from rakeshmiglani

That's great, thanks very much!
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now