Mailbox access rights dosn't work with security group

Posted on 2006-05-11
Last Modified: 2008-03-10
Hello experts

I have a network with a 2003 server DC, exchange on a 2003 server (not DC), a few other servers, one domain.
I have a few mailboxes created that a couple of people need access to.  Everything usually works fine.

I just created one mailbox and a security group.  As far as I know they're the same as all the others I've created before.  I've given full access to the mailbox to that security group and it doesn't work.  I had all users log off and still nada.  If I add the user directly in the mailbox access rights, it works right away.

The security group itself is mailbox enabled and everything seems ok, I just don't get why it's not working.  I'm sure it's stupid I'm just not seeing it.

Any clues?
Question by:inf2300
    LVL 104

    Expert Comment

    Exchange caches permissions. These permissions are flushed every couple of hours or so.
    Therefore you may have to simply wait a bit longer.

    If you can't wait, reboot the Exchange server.

    LVL 18

    Expert Comment


    What you can do is create a mailbox and in exchange advanced tab of Exchange 2003 User in ADUC go to mailbox rights....add security group in permission and give security group full mailbox access and read access.

    That will work.


    Author Comment

    That's what I thought at first Sembee, but it's been 4 days so I doubt that's it :\

    And Ashish, that's the only way I know of giving mailbox access rights to a group... That's what I've been doing all along.
    LVL 12

    Expert Comment

    is your Active directory running in mixed mode or Native mode? what is the scope of this security group? is this Domain local, Global or Universal?

    Amit Aggarwal.

    Author Comment

    I'm running in mixed mode and it's a global group. (Like all the other groups that work correctly).
    LVL 12

    Accepted Solution

    do you mean that its the group specific issue? Try deleting and recreating the group.
    What if you add group and individual user both for permissions? I am checking if group is getting some inherited explicit deny set somewhere.

    Amit Aggarwal.

    Author Comment

    Oops, I completely forgot about this question.  I think I ended up creating a new group with a new email address (to also grant exchange permissions) and that worked fine.

    I guess Amit got it the closest, points to you.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now