• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 624
  • Last Modified:

ExFolders

I am trying to use ExFolders against 2010 and I select the GC and then select the stores.  I then select the folder properties I am trying to find and I get an error that the user does not have permission to access the mailbox.
even though the user I am logged in as is the domain admin for all servers.

Any thoughts?

If not have any thoughts on how to find a file that is causing a DOC_TOO_HUGE error in the stores?
0
Liam Dwyer
Asked:
Liam Dwyer
1 Solution
 
AmitIT ArchitectCommented:
Domain admin doesn't have access to Exchange mailbox database. You need to add permission at DB or Mailbox level and access. Also it is recommended not to use domain admin users for supporting Exchange server. You should rather create new account and add it to Exchange Org Group.
0
 
Liam DwyerNetwork EngineerAuthor Commented:
Thank you! And I am assuming that I can only do that in ADSI or powershell?
It is one domain admin user set for all servers.  Not my environment not set up by me.
0
 
Simon Butler (Sembee)ConsultantCommented:
I would create another account to do this work, rather than using the Domain Admin. That will allow you to have some control and accountability. The permissions have to be set via EMS:

This will give the account permissions to list the mailboxes:
Add-RoleGroupMember "View-Only Organization Management" -Member "MailboxAdmin"

and this will give them permissions to access them:

Get-MailboxDatabase | Add-ADPermission -User "MailboxAdmin" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin

Receive As is the same as Full Mailbox Access.

Simon.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
AmitIT ArchitectCommented:
Powershell is required to setup the permission. You can use the command posted by Simon above.
0
 
Liam DwyerNetwork EngineerAuthor Commented:
Thanks guys! I will do some work tonight.
0
 
guru-di-exchangeCommented:
Hi Liam, Run the following shell command and you will set the permissions on all the mailboxes in your organization so that the user you specify will have FullAccess rights on all mailboxes and ExFolders will not throw that error out anymore:

Get-Mailbox | Add-MailboxPermission -User [username] -AccessRights FullAccess –InheritanceType All

Hope this helps.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now