[Last Call] Learn how to a build a cloud-first strategyRegister Now


Security Group for accessing users mailbox in Office 365

Posted on 2012-08-28
Medium Priority
Last Modified: 2012-09-14
We're using Microsoft Office 365 and would like to know if it is possible for members of a security group to access any users mailbox; regardless if the users AD account was active or disabled.

The corporation owns the information (mailbox) and would like access to the information at all times. Is this something that can this be implemented?

If it's unsupported, is there a work-around?


Question by:Angeal
  • 3
  • 2
LVL 52

Assisted Solution

by:Manpreet SIngh Khatra
Manpreet SIngh Khatra earned 1500 total points
ID: 38345321
To be able to access a users mailbox your account needs to be mail enabled and working :)

You can however check for Journaling .... this would mean all emails comming IN-OUT of the organization would have a secondary copy to a mailbox that you would define.

If you have enabled AD accounts with mailbox you just need to give those accounts "Full Mailbox Access" on other users Mailbox and can add them to your Outlook or monitor from OWA\Webmail as well :)

- Rancy

Author Comment

ID: 38345840
Hi Rancy,

1. I would like to create a security group and the members of that group will have access to any users email. So to clarify - the members of the group accounts will be active and have mail enabled.

2. We use Office 365 for small business, and at this time Journaling is only available for Enterprise subscriptions.

3. Do you know how to give the security group "Full Mailbox Access"? I imagine this can only be done using Powershell? I've never used Powershell so if you have time, please provide as much info as possible.

Thanks for your help - It's greatly appreciated.

LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38345935
1. Yes
2. Humm :(
3. I know for normal Exchange environment ..... i guess you can get that information from MS Support and dont think they chanrge for it ? If not will try to find and share in some time :)

- Rancy

Accepted Solution

Angeal earned 0 total points
ID: 38381048
I was able to resolve my issue. A couple things need to be in place.

A) You can't use a security group in AD - in order to give full access rights to a group using Exchange online, is to create a security distribution group in Exchange (won't be visible in AD) .

B) a user needs a valid license E1, E3 etc to be included in the distribution group.

Author Closing Comment

ID: 38398081
Expert comments helped, but wasn't given enough information to answer the question.

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question