Solved

Exchange 2003 - Grant view mailbox, full mailbox access and send as to entire OU?

Posted on 2010-08-17
10
838 Views
Last Modified: 2012-06-21
I have several users that need to be able to either view all users mailboxes, full control of mailboxes or send as everyone in a particular OU. I figured I could set some permissions on the entire OU, I'm just not sure which permissions.

When I go to the OU and to the properties, security, I go to Add, put in the user name then edit the user I am not sure what to add for either View, Full Control or Send As. I'm guessing I need to apply onto "This object and all child objects...
0
Comment
Question by:mvalpreda
10 Comments
 
LVL 5

Expert Comment

by:ploftin
ID: 33460190
I think you'll need to instead:

1) Create a new security group and add each of the users you'd like to have access to that group.
2) Modify the security permissions of the mailbox(es) that you want that group to have access to.

With this setup, you can control access based on who is in the specified security group.
0
 
LVL 2

Author Comment

by:mvalpreda
ID: 33460207
That's fine. I will keep that in mind.

I don't want to manually change 50 mailboxes. How do I do that at the OU level?
0
 
LVL 6

Expert Comment

by:craig_j_Lawrence
ID: 33460831
as ploftin stated, you will need to create a security group, because OU cannot be used as a security principal. you could create a script that will update members of the group based on OU membership.
0
Why do Marketing keep bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

 
LVL 23

Expert Comment

by:Malli Boppe
ID: 33461687
You can use AdModify tool which is free and really power full for making  bulk AD modifications. Its really easy to use.Download and run on the exchange server.
http://admodify.codeplex.com/releases/view/6065
0
 
LVL 23

Accepted Solution

by:
Malli Boppe earned 500 total points
ID: 33687522
The comment I posted should have helped him change the mailbox rights.If he want further instructions he could use the below link
http://www.msexchange.org/articles/ADModify-Change-Exchange-Specific-AD-User-Attributes.html
0
 
LVL 2

Author Closing Comment

by:mvalpreda
ID: 33760726
Happy?
0
 
LVL 23

Expert Comment

by:Malli Boppe
ID: 33763247
mvalpreda
Learn about how to behave in a forum.If you don't understand ask and we should be able to help you.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
how to add IIS SMTP to handle application/Scanner relays into office 365.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now