Add remote group to RoomMailbox in Exchange 2010

I am struggling with a problem that's driving me crazy.

I have an Exchange Resource Forest with a number of room mailboxes.
For some of the rooms only specific people are allowed to book. That I can fix with both EMC og EMS, no problem. But the tricky part is that those people (up to 300 hundred in some cases) are placed in groups in one of the account domains.

This could have been it, but unfortunately not:
Set-CalendarProcessing `
     -AllBookInPolicy $false `
     -BookInPolicy 'AccountForest.local/SecurityGroups/A-Group-With-Lots-of-users' `
     -Identity 'ExchResourceDomain.company.dk/Resources/Rooms/MeetingRoom1'

Open in new window


Is it possible to add a group from a remote (trusted) domain to the calendar?
Kasper KatzmannSeniorkonsulentAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SreRajCommented:
Hi,

Please try the following. I have added domain controller which should be pointing to a DC in account domain. Also the group should be mail enabled.

Set-CalendarProcessing `
     -AllBookInPolicy $false `
     -BookInPolicy 'AccountForest.local/SecurityGroups/A-Group-With-Lots-of-users' `
     -Identity 'ExchResourceDomain.company.dk/Resources/Rooms/MeetingRoom1'
     -DomainController <DomainController in AccountForest>

Open in new window

0
Kasper KatzmannSeniorkonsulentAuthor Commented:
I have already tried that one. When applying the DC in the AccountForest, PowerShell can't find MeetingRoom1 (in the Resource Forest).
0
SreRajCommented:
Could you please let me know the error after executing the comamnd?
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

Kasper KatzmannSeniorkonsulentAuthor Commented:
The operation couldn't be performed because object 'resourcedomain.com/Rooms/test' couldn't be found on 'dc01.accountdomain.local'.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-DistributionGroupMember], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 695149C3,Microsoft.Exchange.Management.RecipientTasks.AddDistributionGroupMember
0
SreRajCommented:
Please try the command in following format.

Set-CalendarProcessing `
     -AllBookInPolicy $false `
     -BookInPolicy 'AccountForest.local\A-Group-With-Lots-of-users' `
     -Identity 'ExchResourceDomain.company.dk\MeetingRoom1'
     -DomainController <DomainController in AccountForest>

Open in new window

0
Kasper KatzmannSeniorkonsulentAuthor Commented:
It give the exact same error...
0
SreRajCommented:
Please confirm that the group in AccountForest is a mail enabled security group. Also, its group scope should be Global or Universal.
0
Kasper KatzmannSeniorkonsulentAuthor Commented:
The group is Global Security, but it aint mail enabled. There are no mailservers in the account forest.
0
SreRajCommented:
It is not possible to grant permissions for a Secuirty Group in Account Forest to a calendar folder in Exchange Resource Forest. Instead, you could create a Universal Security Group in Exchange Resource Forest and add all the user accounts in Account Domain which requires access to the Room to the USG in Resource forest. Then, mail enable the USG and you could grant the USG the permissions to access the Room.

For Example, if you have created a Universal Security Group, USG1 in Exchange Resource Forest, you can add all the required users from Account Forest to this group. You could then mail enable USG1 and then grant required permissions over the Room Calendar.

Then the command would be

Set-CalendarProcessing `
     -AllBookInPolicy $false `
     -BookInPolicy USG1 `
     -Identity MeetingRoom1

Open in new window

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.