Solved

ExFolders

Posted on 2013-06-26
6
538 Views
Last Modified: 2013-10-18
I am trying to use ExFolders against 2010 and I select the GC and then select the stores.  I then select the folder properties I am trying to find and I get an error that the user does not have permission to access the mailbox.
even though the user I am logged in as is the domain admin for all servers.

Any thoughts?

If not have any thoughts on how to find a file that is causing a DOC_TOO_HUGE error in the stores?
0
Comment
Question by:Liam Dwyer
6 Comments
 
LVL 41

Expert Comment

by:Amit
ID: 39278783
Domain admin doesn't have access to Exchange mailbox database. You need to add permission at DB or Mailbox level and access. Also it is recommended not to use domain admin users for supporting Exchange server. You should rather create new account and add it to Exchange Org Group.
0
 

Author Comment

by:Liam Dwyer
ID: 39278822
Thank you! And I am assuming that I can only do that in ADSI or powershell?
It is one domain admin user set for all servers.  Not my environment not set up by me.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39278840
I would create another account to do this work, rather than using the Domain Admin. That will allow you to have some control and accountability. The permissions have to be set via EMS:

This will give the account permissions to list the mailboxes:
Add-RoleGroupMember "View-Only Organization Management" -Member "MailboxAdmin"

and this will give them permissions to access them:

Get-MailboxDatabase | Add-ADPermission -User "MailboxAdmin" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin

Receive As is the same as Full Mailbox Access.

Simon.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 41

Expert Comment

by:Amit
ID: 39278848
Powershell is required to setup the permission. You can use the command posted by Simon above.
0
 

Author Comment

by:Liam Dwyer
ID: 39278866
Thanks guys! I will do some work tonight.
0
 
LVL 1

Accepted Solution

by:
guru-di-exchange earned 500 total points
ID: 39408546
Hi Liam, Run the following shell command and you will set the permissions on all the mailboxes in your organization so that the user you specify will have FullAccess rights on all mailboxes and ExFolders will not throw that error out anymore:

Get-Mailbox | Add-MailboxPermission -User [username] -AccessRights FullAccess –InheritanceType All

Hope this helps.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now