Full Access / Send As - Exchange 2010

Posted on 2013-05-16
Medium Priority
Last Modified: 2013-08-08
Hi All,

I ran a PowerShell script against our exchange 2010 infrastructure a few months back to give a service account (domain\myserviceaccount) both Full Access and Send As permissions on all users.

Although it worked at the time, the permissions don't appear to be propagating against new users. Where have I gone wrong? What do I need to run instead to get it to propagate?

Many thanks,

Question by:PeterHing
  • 2
LVL 14

Expert Comment

by:Ben Hart
ID: 39171065
If you gained those permissions by running a script, then obviously you'd need to re-run the script to update new mailboxes created since then.  Can you post this script?

Author Comment

ID: 39171106
It was more of a command than a script. Was something as simple as:

Get-Mailbox | Add-MailboxPermission domain\serviceaccount -AccessRights FullAccess

Open in new window

It listed every mailbox as it added the permission.

I'm guessing I have to do something higher up that includes inheritance?
LVL 14

Expert Comment

by:Ben Hart
ID: 39171126
Mmmm no that'd be a recurring script you'd need to run. Ahhh possibly making the service account an Organization admin might do it.. or at least server administrator within Exchange.  But from the looks of it this script has nothing in it that'd make it a perm change to new mailboxes.
LVL 63

Accepted Solution

Simon Butler (Sembee) earned 1200 total points
ID: 39171896
The reason is that you set it on the mailbox, rather than higher up, so the permission doesn't get inherited.

This command will ensure that permissions are inherited.

get-mailboxserver | add-adpermission –user SVCAccount –accessrights ExtendedRight –extendedrights Send-As, Receive-As

Recieve As gives full mailbox access as well.


Featured Post

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Exchange database can often fail to mount thereby halting the work of all users connected to it. Finding out why database isn’t mounting is crucial and getting the server back online. Stellar Phoenix Mailbox Exchange Recovery is a champion product t…
What is the biggest problem in managing an exchange environment today? It is the lack of backups, disaster recovery (DR) plan, testing of the DR plan or believing that it won’t happen to us.
This video discusses moving either the default database or any database to a new volume.
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Suggested Courses

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question