Security Group for accessing users mailbox in Office 365

Posted on 2012-08-28
Last Modified: 2012-09-14
We're using Microsoft Office 365 and would like to know if it is possible for members of a security group to access any users mailbox; regardless if the users AD account was active or disabled.

The corporation owns the information (mailbox) and would like access to the information at all times. Is this something that can this be implemented?

If it's unsupported, is there a work-around?


Question by:Angeal
    LVL 52

    Assisted Solution

    To be able to access a users mailbox your account needs to be mail enabled and working :)

    You can however check for Journaling .... this would mean all emails comming IN-OUT of the organization would have a secondary copy to a mailbox that you would define.

    If you have enabled AD accounts with mailbox you just need to give those accounts "Full Mailbox Access" on other users Mailbox and can add them to your Outlook or monitor from OWA\Webmail as well :)

    - Rancy

    Author Comment

    Hi Rancy,

    1. I would like to create a security group and the members of that group will have access to any users email. So to clarify - the members of the group accounts will be active and have mail enabled.

    2. We use Office 365 for small business, and at this time Journaling is only available for Enterprise subscriptions.

    3. Do you know how to give the security group "Full Mailbox Access"? I imagine this can only be done using Powershell? I've never used Powershell so if you have time, please provide as much info as possible.

    Thanks for your help - It's greatly appreciated.

    LVL 52

    Expert Comment

    1. Yes
    2. Humm :(
    3. I know for normal Exchange environment ..... i guess you can get that information from MS Support and dont think they chanrge for it ? If not will try to find and share in some time :)

    - Rancy

    Accepted Solution

    I was able to resolve my issue. A couple things need to be in place.

    A) You can't use a security group in AD - in order to give full access rights to a group using Exchange online, is to create a security distribution group in Exchange (won't be visible in AD) .

    B) a user needs a valid license E1, E3 etc to be included in the distribution group.

    Author Closing Comment

    Expert comments helped, but wasn't given enough information to answer the question.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    The problems with reply email signatures

    Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

    Learn more about how the humble email signature can be used as more than just an electronic business card. When used correctly, a signature can easily be tailored for different purposes by different departments within an organization.
    Set up iPhone and iPad email signatures to always send in high-quality HTML with this step-by step guide.
    In a previous video Micro Tutorial here at Experts Exchange (, I explained how to get a free, one-month trial of Office …
    This lesson covers basic error handling code in Microsoft Excel using VBA. This is the first lesson in a 3-part series that uses code to loop through an Excel spreadsheet in VBA and then fix errors, taking advantage of error handling code. This l…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now