Solved

Exchange 2003 - Grant view mailbox, full mailbox access and send as to entire OU?

Posted on 2010-08-17
10
865 Views
Last Modified: 2012-06-21
I have several users that need to be able to either view all users mailboxes, full control of mailboxes or send as everyone in a particular OU. I figured I could set some permissions on the entire OU, I'm just not sure which permissions.

When I go to the OU and to the properties, security, I go to Add, put in the user name then edit the user I am not sure what to add for either View, Full Control or Send As. I'm guessing I need to apply onto "This object and all child objects...
0
Comment
Question by:mvalpreda
10 Comments
 
LVL 5

Expert Comment

by:ploftin
ID: 33460190
I think you'll need to instead:

1) Create a new security group and add each of the users you'd like to have access to that group.
2) Modify the security permissions of the mailbox(es) that you want that group to have access to.

With this setup, you can control access based on who is in the specified security group.
0
 
LVL 2

Author Comment

by:mvalpreda
ID: 33460207
That's fine. I will keep that in mind.

I don't want to manually change 50 mailboxes. How do I do that at the OU level?
0
 
LVL 6

Expert Comment

by:craig_j_Lawrence
ID: 33460831
as ploftin stated, you will need to create a security group, because OU cannot be used as a security principal. you could create a script that will update members of the group based on OU membership.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 23

Expert Comment

by:Malli Boppe
ID: 33461687
You can use AdModify tool which is free and really power full for making  bulk AD modifications. Its really easy to use.Download and run on the exchange server.
http://admodify.codeplex.com/releases/view/6065 
0
 
LVL 23

Accepted Solution

by:
Malli Boppe earned 500 total points
ID: 33687522
The comment I posted should have helped him change the mailbox rights.If he want further instructions he could use the below link
http://www.msexchange.org/articles/ADModify-Change-Exchange-Specific-AD-User-Attributes.html 
0
 
LVL 2

Author Closing Comment

by:mvalpreda
ID: 33760726
Happy?
0
 
LVL 23

Expert Comment

by:Malli Boppe
ID: 33763247
mvalpreda
Learn about how to behave in a forum.If you don't understand ask and we should be able to help you.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question