Admin access to all inboxes

I use to be able with Exchange 2000 running on Windows 2000 Server to access the inbox of all users on my domain.  I have upgraded to Exchange 2003 and I can no longer do this.  help!
myers_cdAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

myers_cdAuthor Commented:
I had already printed off the WEB pages suggested at petri.co, however, I have check and all of the administrator rights are correct, but I still cannot get into other email folders.  It keeps asking for a username and password if I use the WEB, which it never did before and if I try with Outlook I get an "Unable to display folder. Inbox cannot be found" error.  Help!
0
rakeshmiglaniCommented:
if the permissions are correct then it should work as expected. have you tried re-adding the permissions?
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

myers_cdAuthor Commented:
Yes.  No change.
0
myers_cdAuthor Commented:
Anyone else have any ideas?

I am running Exchange 2003 SP 2 on top of Windows 2000 in a Windows 2000 AD.  When I was running Exchange 2000 I had admin privileges to access all users mailboxes.  I don't now if it was when I upgraded to Exchange 2003 or when we did the DST updates, but now I cannot access anyones mailbox.  If I attemptto access it via OWA I am asked to supply a username and password.  Obviously my domain admin account does not work.  If I attempt to get there via Outlook on my local machine, I get a "unable to access folder" error.  I am not sure what has happened, but it all seems to point to an authorization issue.    I have already read other threads and have gone to petri and read the article on How to grant administator full mailbox rights on Exchange 2003.  Please help!
0
Stacy SpearPresident/Principal ConsultantCommented:
You may be running into a classic problem, allowed in one aspect and denied in another.

i.e., if you have set the permissions on the account to allow access to all mailboxes, but are are part of a group that is being denied permission to the mailboxes, then you don't have permission to the boxes. All the default groups have built in deny rights to prevent just what you are trying to do, carte blanche access to all boxes is not a good idea. People complaining about this is just why the default has you denied at multiple levels.

Best way around it (if you must) is to make a new account that's not in any group, do what petri suggests and then you are in.
0
Hypercat (Deb)Commented:
If you are using an account that is in several groups, just adding a specific account or group may not do the trick.  By default, any person or group who is designated as an Exchange Full Administrator has the "DENY" setting selected for Send As and Receive As for all mailboxes.  This Deny attribute will override any other "Allow" attributes you try to set.  So, for example, if your account is in the Domain Admins group, and that group has been given Exchange Full Administrator privileges, whether you set your individual account access to "Allow" or not, you still won't be able to access the mailboxes.  Contrary to what the referenced article says, here's what I always do if I need to grant my account full access to all mailboxes in the store, assuming my account is also an Exchange Full Administrator, or a member of a group that is:

1.  Right-click on the mailbox store, go to Security, click Advanced and UN-click the inheritance box.  COPY all existing permissions to the mailbox store.
2.  Now you can edit the permissions to the specific mailbox store individually.  For example, if your account is a member of the domain admins, and domain admins is an Exchange Full Administrator, then you can simply remove the "Deny" attributes for Send As and Receive As.

If in fact you are supposed to have this level of access, this is the only way to ensure it.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.