[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Linked Mailboxes

Posted on 2011-02-22
7
Medium Priority
?
643 Views
Last Modified: 2012-05-11
Hi

We have two forests - our original AD forest (ADForest) running Windows 2008 DC and also an Exchange 2007 forest (ExchangeForest) holding user mailboxes. There are trusts etc set up, but I was wondering how this would all work.

For instance, I have a manager's mailbox in the Exchange forest. I want to give an Assistant access to that....do I just give access to their ADForest account? Wil this mean that their Outlook can access the Manager's one?
0
Comment
Question by:Joe_Budden
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 31

Accepted Solution

by:
MegaNuk3 earned 2000 total points
ID: 34954369
You can do it either way. Either give the Assistants ADaccount from the AccountForest 'Full mailbox access' rights on the mailbox or if you want to do delegation or in-mailbox permissions then assign the assistants mailbox the delegated permissions or outlook subfolders permissions.
0
 
LVL 1

Author Comment

by:Joe_Budden
ID: 34954405
So whenever we come to permissions, it's exactly the same as if there was only one forest? Exchange 'knows' that whenever we want to assign someone a mailbox permission, we can use the AD account in the ADForest domain?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34954451
Yep, Apart from delegation or in-mailbox folder permissions where you will have to assign the permissions to the resource forest mailbox because you can only select objects from the GAL to give out these folder permissions.
0
Learn Veeam advantages over legacy backup

Every day, more and more legacy backup customers switch to Veeam. Technologies designed for the client-server era cannot restore any IT service running in the hybrid cloud within seconds. Learn top Veeam advantages over legacy backup and get Veeam for the price of your renewal

 
LVL 1

Author Comment

by:Joe_Budden
ID: 34955109
That's a good point.

If I am looking at the GAL in the ADForest - what objects am I actually looking?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34955254
The GAL is from the forest where exchange is installed and where the mailbox is located that you are using to view the GAL
0
 
LVL 1

Author Comment

by:Joe_Budden
ID: 35072992
What's the best practice though?

Same example:

AD Forest: ADForest (accounts users use to log in etc)
Exchange Forest: ExchangeForest (mailboxes only set up as Linked Mailboxes, the corresponding AD account for the mbx is disabled)

I have a Manager and I want to give his PA 'full mailbox access' to his mailbox. So I go to EMC > Mailbox > Manage Full Access Permission

What account should I add

1. The PA's ADForest user account
2. The PA's ExchangeForest account (or am I actually choosing her mailbox here)?
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 35073053
Add the Exchange Account/mailbox and it will work, that is the best way too.
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On September 18, Experts Exchange launched the first installment of the Help Bell, a new feature for Premium Members, Team Accounts, and Qualified Experts. The Help Bell will serve as an additional tool to help teams increase question visibility.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This video discusses moving either the default database or any database to a new volume.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question