Solved

Setting Full Access Permissions breaking automatic email downloads.

Posted on 2013-10-29
11
318 Views
Last Modified: 2013-11-19
I have a couple of users who stop receiving email automatically when I grant them full access permission to another user's account in Exchange 2010.

The users are both using Outlook 2010.

Automatic email delivery resumes when I remove the shared mailbox.

Automatic delivery is configured on their computer's and changing the automatic email delivery interval has no effect.

Anyone have any idea why this is happening?
0
Comment
Question by:Mdamon808
  • 5
  • 3
  • 2
11 Comments
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39609684
Hope you are using the basic switch not to AutoMap the mailbox .... did you try with Outlook in Online\Cache mode ?
Is the issue re-producible with OWA\Webmail too ?

- Rancy
0
 

Author Comment

by:Mdamon808
ID: 39609814
I'm not sure about the switch you are talking about. Where would I  find it?

Online/cached mode makes no difference.

Emails are being delivered via Activesync to the employee's phones (which is how they discovered the problem) so I suspect that they are still being delivered to the OWA as well.
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39609877
Disable Exchange 2010's Auto Shared Mailbox Mapping Feature
http://www.stevieg.org/2011/02/disable-exchange-2010-sp1s-auto-shared-mailbox-mapping/

This should help

- Rancy
0
 

Author Comment

by:Mdamon808
ID: 39610169
When I run the SP2 command (we are using SP2) found in the article you linked I get the following message.

WARNING: The appropriate access control entry is already present on the object "CN=Username1,OU=USERS,OU=CITY,OU=REGION,DC=Domain,DC=Domain" for account "DOMAIN\Username2".

Identity             User                 AccessRights                                                IsInherited Deny
 --------               ----                    ------------                                                        ----------- ----
Domain/Region/City... DOMAIN\Username2    {FullAccess}                            False       False

If I am reading this correctly it looks like the change I was trying to make is already in place.
0
 

Author Comment

by:Mdamon808
ID: 39639527
Can someone please address this ticket?

It has been almost a week since I requested further attention on this issue and I have not heard anything yet.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39640729
So what you have to do is remove the rights and then run the command .... reason why it gives warning is cause "Full Access" is already there but with AutoMapping as by default

Close Outlook profile
Remove FullMailboxAccess and wait for replication update
Open Outlook and check Outlook doesnt shows the additional profile
Again now run the command with excluding AutoMapping


- Rancy
0
 
LVL 3

Expert Comment

by:jmorourke80
ID: 39640778
Are the users receiving any errors when trying to manually sync their mailbox with a Send and Receive? Or have you checked the event logs on the Exchange server? You could be running into a per-user MAPI session cap.
0
 

Author Comment

by:Mdamon808
ID: 39643176
jmorouke80, No they are not receiving any errors when they use the manual send/receive feature.

I am in the process of digging through the logs now, but I am not entirely sure what I am looking for. Do I look for the user having the issue or the user who's mailbox is being shared (I am guessing the user being shared but better safe than sorry right)?
0
 
LVL 3

Accepted Solution

by:
jmorourke80 earned 500 total points
ID: 39643485
While not completely relevant, this article deals with diagnosing MAPI session limits and details the registry keys to resolve them.

http://technet.microsoft.com/en-au/library/ff360476(v=exchg.140).aspx

If you check your event logs for the event IDs and sources specified at the start of the article, that should be enough to let you know if its worth reading further.
0
 

Author Closing Comment

by:Mdamon808
ID: 39660280
This was exactly the problem. if I could put a plus on the grade I would.

Thanks.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
how to add IIS SMTP to handle application/Scanner relays into office 365.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now