Solved

Linked Mailboxes

Posted on 2011-02-22
7
632 Views
Last Modified: 2012-05-11
Hi

We have two forests - our original AD forest (ADForest) running Windows 2008 DC and also an Exchange 2007 forest (ExchangeForest) holding user mailboxes. There are trusts etc set up, but I was wondering how this would all work.

For instance, I have a manager's mailbox in the Exchange forest. I want to give an Assistant access to that....do I just give access to their ADForest account? Wil this mean that their Outlook can access the Manager's one?
0
Comment
Question by:Joe_Budden
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 31

Accepted Solution

by:
MegaNuk3 earned 500 total points
ID: 34954369
You can do it either way. Either give the Assistants ADaccount from the AccountForest 'Full mailbox access' rights on the mailbox or if you want to do delegation or in-mailbox permissions then assign the assistants mailbox the delegated permissions or outlook subfolders permissions.
0
 
LVL 1

Author Comment

by:Joe_Budden
ID: 34954405
So whenever we come to permissions, it's exactly the same as if there was only one forest? Exchange 'knows' that whenever we want to assign someone a mailbox permission, we can use the AD account in the ADForest domain?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34954451
Yep, Apart from delegation or in-mailbox folder permissions where you will have to assign the permissions to the resource forest mailbox because you can only select objects from the GAL to give out these folder permissions.
0
Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

 
LVL 1

Author Comment

by:Joe_Budden
ID: 34955109
That's a good point.

If I am looking at the GAL in the ADForest - what objects am I actually looking?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34955254
The GAL is from the forest where exchange is installed and where the mailbox is located that you are using to view the GAL
0
 
LVL 1

Author Comment

by:Joe_Budden
ID: 35072992
What's the best practice though?

Same example:

AD Forest: ADForest (accounts users use to log in etc)
Exchange Forest: ExchangeForest (mailboxes only set up as Linked Mailboxes, the corresponding AD account for the mbx is disabled)

I have a Manager and I want to give his PA 'full mailbox access' to his mailbox. So I go to EMC > Mailbox > Manage Full Access Permission

What account should I add

1. The PA's ADForest user account
2. The PA's ExchangeForest account (or am I actually choosing her mailbox here)?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 35073053
Add the Exchange Account/mailbox and it will work, that is the best way too.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes how to import an Outlook PST file to Office 365 using a third party product to avoid Microsoft's Azure command line tool, saving you time.
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question