Setting a user to not be able to delete emails on a shared mailbox

Posted on 2012-08-20
Last Modified: 2013-03-13

I have an SBS 2003 server and Outlook 2010. On this system there is a shared mailbox.
How can this be set so the users (in a mail enabled security group) who have access to the shared mailbox cannot delete any emails.

I have tried setting the Deny permission under mailbox rights in AD and also changing the security group to either a reviewer or none in Outlook 2010.

Any straightforward answers, much appreciated.

Thank you in advance.
Question by:pmits
    LVL 52

    Accepted Solution

    Does the Security group has rights to that Shared mailbox if so what rights ?
    If i understand you want user to be able to only modify items by himself and not by anyone else ? If so go to Properties of each Folder of the shared mailbox and set the user in Permissions tab and select the Reviewer Option or might have to customize.

    - Rancy
    LVL 6

    Assisted Solution

    Create a mail-enabled universal security group named "Shared Mailbox Users"
    and put everyone who you want to use the shared mailbox into the group as a

    Use New-Mailbox to create a mailbox named "Shared Mailbox". Put in all the
    attributes you want for the mailbox like its e-mail address, display name,
    etc. Then log in to that account yourself with Outlook, and grant "Shared
    Mailbox Users" Reviewer role on the root mailbox folder (Outlook Today).
    Then select the folders underneath that you want them to use and grant them
    "Nonediting Author" role or choose another role that best fits what you want
    them to do. (Note that if you allow them to modify items, they can
    essentially delete them by editing them and erasing all data!) Don't give
    anyone "Folder Owner" role except the "Shared Mailbox" account itself, which
    won't show up in the folder rights by default and doesn't need to.

    if they not going to send emails you can ignore this bit...........

    Finally, run this cmdlet (where DOMAIN is the name of your domain):

    Add-ADPermission "Shared Mailbox" -User "DOMAIN\Shared Mailbox
    Users" -Extendedrights "Send As"

    Everyone in "Shared Mailbox Users" will be able to open that mailbox as an
    additional mailbox in Outlook, or can use "Open other user's folders", but
    they won't be able to open it as a primary mailbox in their profile.
    They'll be able to read messages, reply to them as "Shared Mailbox", or send
    new messages as "Shared Mailbox".
    LVL 52

    Expert Comment

    So you want to deny some users to be able to send emails from the shared mailbox or stop them with some specific rights to the Calendar ?

    - Rancy

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Granting full access permission allows users to access mailboxes present in their database. By giving full access permission one can open and read the content of any mailbox but cannot send emails from that mailbox.
    Sometimes Outlook might have problems sending a message. There may be various causes- corrupted PST, AV scanner etc. The message, instead of going to the Sent Items folder, sits in the Outbox indefinitely. To remove it you can use a free tool cal…
    Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now