Grant Admin Full Access to all mailboxes

arefone
arefone used Ask the Experts™
on
Hi,
There are many websites speak about how to grant permission on all mailboxes on Exchange 2010 for admin user, but a lot of those websites have many differences with the explaination, so I would like to know what are the correct steps to grant full permissions on all existing mailboxes and FUTURE mailboxes on Exchange 2010.

Thank you in advance
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
Hi,
There are many websites speak about how to grant permission on all mailboxes on Exchange 2010 for admin user, but a lot of those websites have many differences with the explaination, so I would like to know what are the correct steps to grant full permissions on all existing mailboxes and FUTURE mailboxes for the admin user on Exchange 2010.

Thank you in advance
From exchange power shell:

Get-Mailbox | Add-MailboxPermission  -User 'Mark Steele' -AccessRight FullAccess

Consider users privacy before doing that, if you have a privacy policy on your org/country.

Author

Commented:
I'll consider the privacy policies.

Does that command grant the full access also to the new mailboxes that will be added in the future?
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

No, it will only be applied on the current mailboxes.

Author

Commented:
You should answer according to the question I posted.
Sorry, I did't read the question carefully.

You can run below cmdlet after mailbox creation:

Add-MailboxPermission -Identity UserName -User 'User_how_needs_the_access' -AccessRight FullAccess

http://technet.microsoft.com/en-us/library/bb124097(v=exchg.141).aspx


I don't know an automated way to do that.
Solutions Architect
Commented:
Get-MailboxDatabase | Add-ADPermission -user [username] -AccessRights GenericAll

this will give access to all mailboxes current and future as long as you don't create a new DB.

you will need to add permission for every new DB however

Author

Commented:
> Akhater: do I need to add/modify admin user security settings in somewhere or its enough to apply the command you mentioned?
Is there any need to restart any exchange service to make changes take effect immediately?
Can I do it with GUI instead of PowerShell?
AkhaterSolutions Architect
Commented:
Applying the command is enough

You have to wait 2 hours or restart you active directory topology service

No can't be done with GUI sorry

Author

Commented:
Can you mention the name of the Active Directory Topology service?
AkhaterSolutions Architect

Commented:
Microsoft Exchange active directory topology

Author

Commented:
Akhater, may I ask you what do you think about this link instructions:
http://msundis.wordpress.com/2011/06/21/manage-full-access-permissions-on-mailboxes-in-exchange-2010/
AkhaterSolutions Architect

Commented:
Well I am on mobile but it seems the blog post give many options to achieve what you are looking for. Some per mailbox and some per database as I did.

He is just picking some permissions when I have genericall

Did you try mine? It should work

Author

Commented:
Not yet, I will try and let you know!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial