Solved

Admin access to all inboxes

Posted on 2007-03-26
7
213 Views
Last Modified: 2010-04-20
I use to be able with Exchange 2000 running on Windows 2000 Server to access the inbox of all users on my domain.  I have upgraded to Exchange 2003 and I can no longer do this.  help!
0
Comment
Question by:myers_cd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 35

Expert Comment

by:rakeshmiglani
ID: 18794271
0
 

Author Comment

by:myers_cd
ID: 18794357
I had already printed off the WEB pages suggested at petri.co, however, I have check and all of the administrator rights are correct, but I still cannot get into other email folders.  It keeps asking for a username and password if I use the WEB, which it never did before and if I try with Outlook I get an "Unable to display folder. Inbox cannot be found" error.  Help!
0
 
LVL 35

Expert Comment

by:rakeshmiglani
ID: 18794700
if the permissions are correct then it should work as expected. have you tried re-adding the permissions?
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:myers_cd
ID: 18794763
Yes.  No change.
0
 

Author Comment

by:myers_cd
ID: 18795035
Anyone else have any ideas?

I am running Exchange 2003 SP 2 on top of Windows 2000 in a Windows 2000 AD.  When I was running Exchange 2000 I had admin privileges to access all users mailboxes.  I don't now if it was when I upgraded to Exchange 2003 or when we did the DST updates, but now I cannot access anyones mailbox.  If I attemptto access it via OWA I am asked to supply a username and password.  Obviously my domain admin account does not work.  If I attempt to get there via Outlook on my local machine, I get a "unable to access folder" error.  I am not sure what has happened, but it all seems to point to an authorization issue.    I have already read other threads and have gone to petri and read the article on How to grant administator full mailbox rights on Exchange 2003.  Please help!
0
 
LVL 23

Expert Comment

by:Stacy Spear
ID: 18795694
You may be running into a classic problem, allowed in one aspect and denied in another.

i.e., if you have set the permissions on the account to allow access to all mailboxes, but are are part of a group that is being denied permission to the mailboxes, then you don't have permission to the boxes. All the default groups have built in deny rights to prevent just what you are trying to do, carte blanche access to all boxes is not a good idea. People complaining about this is just why the default has you denied at multiple levels.

Best way around it (if you must) is to make a new account that's not in any group, do what petri suggests and then you are in.
0
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 18795715
If you are using an account that is in several groups, just adding a specific account or group may not do the trick.  By default, any person or group who is designated as an Exchange Full Administrator has the "DENY" setting selected for Send As and Receive As for all mailboxes.  This Deny attribute will override any other "Allow" attributes you try to set.  So, for example, if your account is in the Domain Admins group, and that group has been given Exchange Full Administrator privileges, whether you set your individual account access to "Allow" or not, you still won't be able to access the mailboxes.  Contrary to what the referenced article says, here's what I always do if I need to grant my account full access to all mailboxes in the store, assuming my account is also an Exchange Full Administrator, or a member of a group that is:

1.  Right-click on the mailbox store, go to Security, click Advanced and UN-click the inheritance box.  COPY all existing permissions to the mailbox store.
2.  Now you can edit the permissions to the specific mailbox store individually.  For example, if your account is a member of the domain admins, and domain admins is an Exchange Full Administrator, then you can simply remove the "Deny" attributes for Send As and Receive As.

If in fact you are supposed to have this level of access, this is the only way to ensure it.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Journaling 2 16
O365 Mobile Device Management and ActiveSync Policies... 2 99
SPF record for Exchange Cloud 9 41
Exchange 2010 permissions issue 8 28
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question