Setting Full Access Permissions breaking automatic email downloads.

Posted on 2013-10-29
Last Modified: 2013-11-19
I have a couple of users who stop receiving email automatically when I grant them full access permission to another user's account in Exchange 2010.

The users are both using Outlook 2010.

Automatic email delivery resumes when I remove the shared mailbox.

Automatic delivery is configured on their computer's and changing the automatic email delivery interval has no effect.

Anyone have any idea why this is happening?
Question by:Mdamon808
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39609684
Hope you are using the basic switch not to AutoMap the mailbox .... did you try with Outlook in Online\Cache mode ?
Is the issue re-producible with OWA\Webmail too ?

- Rancy

Author Comment

ID: 39609814
I'm not sure about the switch you are talking about. Where would I  find it?

Online/cached mode makes no difference.

Emails are being delivered via Activesync to the employee's phones (which is how they discovered the problem) so I suspect that they are still being delivered to the OWA as well.
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39609877
Disable Exchange 2010's Auto Shared Mailbox Mapping Feature

This should help

- Rancy
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why


Author Comment

ID: 39610169
When I run the SP2 command (we are using SP2) found in the article you linked I get the following message.

WARNING: The appropriate access control entry is already present on the object "CN=Username1,OU=USERS,OU=CITY,OU=REGION,DC=Domain,DC=Domain" for account "DOMAIN\Username2".

Identity             User                 AccessRights                                                IsInherited Deny
 --------               ----                    ------------                                                        ----------- ----
Domain/Region/City... DOMAIN\Username2    {FullAccess}                            False       False

If I am reading this correctly it looks like the change I was trying to make is already in place.

Author Comment

ID: 39639527
Can someone please address this ticket?

It has been almost a week since I requested further attention on this issue and I have not heard anything yet.
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39640729
So what you have to do is remove the rights and then run the command .... reason why it gives warning is cause "Full Access" is already there but with AutoMapping as by default

Close Outlook profile
Remove FullMailboxAccess and wait for replication update
Open Outlook and check Outlook doesnt shows the additional profile
Again now run the command with excluding AutoMapping

- Rancy

Expert Comment

ID: 39640778
Are the users receiving any errors when trying to manually sync their mailbox with a Send and Receive? Or have you checked the event logs on the Exchange server? You could be running into a per-user MAPI session cap.

Author Comment

ID: 39643176
jmorouke80, No they are not receiving any errors when they use the manual send/receive feature.

I am in the process of digging through the logs now, but I am not entirely sure what I am looking for. Do I look for the user having the issue or the user who's mailbox is being shared (I am guessing the user being shared but better safe than sorry right)?

Accepted Solution

jmorourke80 earned 500 total points
ID: 39643485
While not completely relevant, this article deals with diagnosing MAPI session limits and details the registry keys to resolve them.

If you check your event logs for the event IDs and sources specified at the start of the article, that should be enough to let you know if its worth reading further.

Author Closing Comment

ID: 39660280
This was exactly the problem. if I could put a plus on the grade I would.


Featured Post

Scamming the Scammers!

Have you ever heard of Scam Baiting?
It's a highly entertaining sport that you can participate in.
Introduction to beating scammers at their own game and how you can help
Share your thoughts, ideas and experiences on the topic.
Links to top Anti-Scam resources provided.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many people use more than one email account and so it becomes difficult for them to manage them when they use separate accounts,  so, in this article, I have shared an easy way to add Other Mail Accounts in your Google Inbox. It helps to combine all…
This video discusses moving either the default database or any database to a new volume.
Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question