Solved

Exchange mailbox pemissions - Explanation needed.

Posted on 2008-06-25
6
229 Views
Last Modified: 2011-10-19
Hi,
I've recenlty installed a GFI Mail Archiver tool and the current archiving is working well.
However, I'm trying to now archive emails that are in Exchange prior to enabling the journaling mailbox.

GFI documentation details a change I must make to give administrator permission to "receive as" and "send as" all mailboxes
http://kbase.gfi.com/showarticle.asp?id=KBID003038

All worked fine in virtual server however on the live server, where there have already been complaints of performance issues. I got two dialog warnings which have scarred me to proceed.

I have put the 2nd warning first below as this is the one that scares me most. I do not really understand it and would welcome comments as to whether I should be worried and where I can learn more about this.

Thanks

dialogue-warning2.JPG
dialogue-warning1.JPG
0
Comment
Question by:afflik1923
  • 3
  • 3
6 Comments
 
LVL 25

Expert Comment

by:kieran_b
ID: 21863976
Yeah, I would be hesitant to click yes on the second one - say no, cancel out, then make this modification to the GFI steps;

7. (still in the advanced tab) select all "deny" entries at the top, and click remove - there will be about 5 of them

Then skip steps 8 and 9

What we are now doing is instead of messing with the permissions too much, we are just removing the deny restrictions on the admins - this will do only that, remove the block allowing admins to all mailboxes.  Anything that involves saying "Yes, I am happy to apply deny entries" like the GFI instructions, could do anything...

If you really want to reverse the process after you are done, you can then go back and add the deny rights again (reverse of what we did here)
0
 

Author Comment

by:afflik1923
ID: 21865464
Thanks for that.

I've think I'm made things a bit confusing with the way I've ordered the screen shots. It seems you are most worried about the "dialogue-warning-1.jpg".
This one I was not too worried about as it occured in testing, but maybe I should be worried about it.

I had a response from GFI tech support on the subject and they seem to say I have to follow their procedure and that if I follow the second step it will reverse the changes anyway

Would you agree with that? Also do you know of any sources that will help me understand why changing permissions could slow things down (As shown in "dialogue-warning-2.jpg".)
0
 
LVL 25

Accepted Solution

by:
kieran_b earned 500 total points
ID: 21870344
It will only slow things down noticeably if you have thousands and thousands of objects (users)

For giving administrators mailbox access, this guide is the winner -> http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:afflik1923
ID: 21870370
Great stuff. I'll cehck it out. There are about 70 users in this company so I assume I have nothing to worry about then, right?
0
 
LVL 25

Expert Comment

by:kieran_b
ID: 21870383
70 is not a problem
0
 

Author Closing Comment

by:afflik1923
ID: 31470489
I implemented the changes as explained in th GFI manual and it seemed to have no ill effect on performance or anything else as far as I know. So thanks for the input.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question