Normally would either give user the necessary rights in AD or if full access use exchange management.
BUT, of course, this gives access to entire mailbox. What I want is to give read access to the calendar but NOT the inbox at all.
Best way to do this - Leave AD well alone and set permissions on mailbox itself in outlook?
Assuming way it works is that any exchange permissions are taken into account but if there is nothing then these permissions are used?