Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 361
  • Last Modified:

Setting Full Access Permissions breaking automatic email downloads.

I have a couple of users who stop receiving email automatically when I grant them full access permission to another user's account in Exchange 2010.

The users are both using Outlook 2010.

Automatic email delivery resumes when I remove the shared mailbox.

Automatic delivery is configured on their computer's and changing the automatic email delivery interval has no effect.

Anyone have any idea why this is happening?
0
Mdamon808
Asked:
Mdamon808
  • 5
  • 3
  • 2
1 Solution
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Hope you are using the basic switch not to AutoMap the mailbox .... did you try with Outlook in Online\Cache mode ?
Is the issue re-producible with OWA\Webmail too ?

- Rancy
0
 
Mdamon808Author Commented:
I'm not sure about the switch you are talking about. Where would I  find it?

Online/cached mode makes no difference.

Emails are being delivered via Activesync to the employee's phones (which is how they discovered the problem) so I suspect that they are still being delivered to the OWA as well.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Disable Exchange 2010's Auto Shared Mailbox Mapping Feature
http://www.stevieg.org/2011/02/disable-exchange-2010-sp1s-auto-shared-mailbox-mapping/

This should help

- Rancy
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
Mdamon808Author Commented:
When I run the SP2 command (we are using SP2) found in the article you linked I get the following message.

WARNING: The appropriate access control entry is already present on the object "CN=Username1,OU=USERS,OU=CITY,OU=REGION,DC=Domain,DC=Domain" for account "DOMAIN\Username2".

Identity             User                 AccessRights                                                IsInherited Deny
 --------               ----                    ------------                                                        ----------- ----
Domain/Region/City... DOMAIN\Username2    {FullAccess}                            False       False

If I am reading this correctly it looks like the change I was trying to make is already in place.
0
 
Mdamon808Author Commented:
Can someone please address this ticket?

It has been almost a week since I requested further attention on this issue and I have not heard anything yet.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
So what you have to do is remove the rights and then run the command .... reason why it gives warning is cause "Full Access" is already there but with AutoMapping as by default

Close Outlook profile
Remove FullMailboxAccess and wait for replication update
Open Outlook and check Outlook doesnt shows the additional profile
Again now run the command with excluding AutoMapping


- Rancy
0
 
jmorourke80Commented:
Are the users receiving any errors when trying to manually sync their mailbox with a Send and Receive? Or have you checked the event logs on the Exchange server? You could be running into a per-user MAPI session cap.
0
 
Mdamon808Author Commented:
jmorouke80, No they are not receiving any errors when they use the manual send/receive feature.

I am in the process of digging through the logs now, but I am not entirely sure what I am looking for. Do I look for the user having the issue or the user who's mailbox is being shared (I am guessing the user being shared but better safe than sorry right)?
0
 
jmorourke80Commented:
While not completely relevant, this article deals with diagnosing MAPI session limits and details the registry keys to resolve them.

http://technet.microsoft.com/en-au/library/ff360476(v=exchg.140).aspx

If you check your event logs for the event IDs and sources specified at the start of the article, that should be enough to let you know if its worth reading further.
0
 
Mdamon808Author Commented:
This was exactly the problem. if I could put a plus on the grade I would.

Thanks.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 5
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now