Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 141
  • Last Modified:

Exchange 2010 - Assigning Access to All Mailboxes

Hello,

I was reading the following article on Experts Exchange regarding providing access to a user and/or group for allowing access to all Exchange 2010 mailboxes.

I brought this to the attention of an colleague, and he mentioned that this syntax would be another option.

Get-Mailbox -ResultSize unlimited -Filter {RecipientTypeDetails -eq 'UserMailbox'} | Add-Mailboxpermission -User <Identity> -AccessRights FullAccess -InheritanceType All –Automapping $False


The section I bolded, is that really necessary to use in this command string? What gain would there be from using this vs the syntax originally provided in the link, if any.

Thanks.
0
victory2201
Asked:
victory2201
  • 3
  • 2
1 Solution
 
AmitIT ArchitectCommented:
In the article you mentioned, it is applied to only one users. If you want to apply it on all users. You need to use command your friend provided.

Your colleague used a filter to apply it on User Mailbox type. As there are other type of mailboxes, like room mailboxes. So this filter will make to sure that it is applied to only usermailboxes type. You can add -whatif at the end and see what it will do and remove -whatif when you want to apply it. Hope this helps.
0
 
victory2201Author Commented:
The Get-Mailbox command should call out all mailboxes in Exchange, correct? That previous link's syntax should work fine for all mailboxes, from what I see.

With that command I posted above, its calling out the -User function, however you should be able to specify a AD Group there as well, if not mistaken?


Thanks.
0
 
victory2201Author Commented:
Amit,

Just to confirm, by running the command below, there should be no negative affects against my Exchange environment, correct?

Get-Mailbox -ResultSize unlimited -Filter {RecipientTypeDetails -eq 'UserMailbox'} | Add-Mailboxpermission -User Administrator -AccessRights FullAccess -InheritanceType All –Automapping $False

Since its using the -User command, would it be possible to  place a AD Group name there instead?

Thanks.
0
 
AmitIT ArchitectCommented:
This command will just add the permission. So no impact.
0
 
victory2201Author Commented:
What about adding an AD group in place of the individual user?
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now