[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 890
  • Last Modified:

Exchange 2003 - Grant view mailbox, full mailbox access and send as to entire OU?

I have several users that need to be able to either view all users mailboxes, full control of mailboxes or send as everyone in a particular OU. I figured I could set some permissions on the entire OU, I'm just not sure which permissions.

When I go to the OU and to the properties, security, I go to Add, put in the user name then edit the user I am not sure what to add for either View, Full Control or Send As. I'm guessing I need to apply onto "This object and all child objects...
0
mvalpreda
Asked:
mvalpreda
1 Solution
 
ploftinCommented:
I think you'll need to instead:

1) Create a new security group and add each of the users you'd like to have access to that group.
2) Modify the security permissions of the mailbox(es) that you want that group to have access to.

With this setup, you can control access based on who is in the specified security group.
0
 
mvalpredaAuthor Commented:
That's fine. I will keep that in mind.

I don't want to manually change 50 mailboxes. How do I do that at the OU level?
0
 
craig_j_LawrenceCommented:
as ploftin stated, you will need to create a security group, because OU cannot be used as a security principal. you could create a script that will update members of the group based on OU membership.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Malli BoppeCommented:
You can use AdModify tool which is free and really power full for making  bulk AD modifications. Its really easy to use.Download and run on the exchange server.
http://admodify.codeplex.com/releases/view/6065 
0
 
Malli BoppeCommented:
The comment I posted should have helped him change the mailbox rights.If he want further instructions he could use the below link
http://www.msexchange.org/articles/ADModify-Change-Exchange-Specific-AD-User-Attributes.html 
0
 
mvalpredaAuthor Commented:
Happy?
0
 
Malli BoppeCommented:
mvalpreda
Learn about how to behave in a forum.If you don't understand ask and we should be able to help you.
0

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now