?
Solved

Linked Mailboxes

Posted on 2011-02-22
7
Medium Priority
?
639 Views
Last Modified: 2012-05-11
Hi

We have two forests - our original AD forest (ADForest) running Windows 2008 DC and also an Exchange 2007 forest (ExchangeForest) holding user mailboxes. There are trusts etc set up, but I was wondering how this would all work.

For instance, I have a manager's mailbox in the Exchange forest. I want to give an Assistant access to that....do I just give access to their ADForest account? Wil this mean that their Outlook can access the Manager's one?
0
Comment
Question by:Joe_Budden
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 31

Accepted Solution

by:
MegaNuk3 earned 2000 total points
ID: 34954369
You can do it either way. Either give the Assistants ADaccount from the AccountForest 'Full mailbox access' rights on the mailbox or if you want to do delegation or in-mailbox permissions then assign the assistants mailbox the delegated permissions or outlook subfolders permissions.
0
 
LVL 1

Author Comment

by:Joe_Budden
ID: 34954405
So whenever we come to permissions, it's exactly the same as if there was only one forest? Exchange 'knows' that whenever we want to assign someone a mailbox permission, we can use the AD account in the ADForest domain?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34954451
Yep, Apart from delegation or in-mailbox folder permissions where you will have to assign the permissions to the resource forest mailbox because you can only select objects from the GAL to give out these folder permissions.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 1

Author Comment

by:Joe_Budden
ID: 34955109
That's a good point.

If I am looking at the GAL in the ADForest - what objects am I actually looking?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34955254
The GAL is from the forest where exchange is installed and where the mailbox is located that you are using to view the GAL
0
 
LVL 1

Author Comment

by:Joe_Budden
ID: 35072992
What's the best practice though?

Same example:

AD Forest: ADForest (accounts users use to log in etc)
Exchange Forest: ExchangeForest (mailboxes only set up as Linked Mailboxes, the corresponding AD account for the mbx is disabled)

I have a Manager and I want to give his PA 'full mailbox access' to his mailbox. So I go to EMC > Mailbox > Manage Full Access Permission

What account should I add

1. The PA's ADForest user account
2. The PA's ExchangeForest account (or am I actually choosing her mailbox here)?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 35073053
Add the Exchange Account/mailbox and it will work, that is the best way too.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
New style of hardware planning for Microsoft Exchange server.
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month8 days, 10 hours left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question