Link to home
Start Free TrialLog in
Avatar of techdrive
techdriveFlag for United States of America

asked on

Granting permissions AD group full access exchange 2010

Greetings I am somewhat confused about an issue in Exchange 2010. I am an Admin I would like to be able to run a command on a group in AD and allow this group to have Full Access to all the mailboxes without having to provide full access to the mailbox manually. Problem is we are currently providing full access to the mailbox manually everytime and then removing access on our personal admin accounts, performing the maintenance and then removing ourselves.

I have read a couple of things and somewhat interested in why you would not do this to a group rather than a database specified below. Again, I would like to not have to provide myself full access to the mailbox everytime I need to do some work. If someoene could provide the command I would be appreciative, thanks

Get-MailboxDatabase -identity "SERVERNAME\First Storage Group\Mailbox Database" | Remove-ADPermission -user administrator -ExtendedRights Receive-As, Send-As

Get-MailboxDatabase -identity “[mailbox database name]” | Add-ADPermission -user [username] -AccessRights GenericAll
SOLUTION
Avatar of piattnd
piattnd

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of techdrive

ASKER

No this was done with Exchange 2007 also. On every mailbox even the ones created after the command was ran gave the group full access to the mailbox.