Permissions for Resource mailboxes (room user)

I have set up  four room mailboxes so that our entire staff can book meetings in those rooms.  I have sorted out some Idiosyncrasies already, but the problem now is that any staff member can delete another members meeting(s).  Does anyone know what rights to change or what Powershell commands to  use?
netsysadmInternal Systems AdministratorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
Can you run the below command on the mailboxes and post back what you see.

Get-CalendarProcessing "roommailbox" | fl

Open in new window


It is possible that you have A group assigned to Resource Delegates.

You can also reference the link below on how to setup permissions properly.
http://exchangeserverpro.com/exchange-server-2010-room-mailboxes-step-by-step-guide/


Will.
0
netsysadmInternal Systems AdministratorAuthor Commented:
Thanks Will.
I had already read the referenced link you sent me, but still couldn't find the answer.
When I looked at the results of the command that you suggested that I run, I saw that a user I thought I took away rights to a particular room, still had delegate rights, so that solved my problem, since this was the user we were testing with.

Now I have another problem.  I would like one person to be able to cancel and delete anyone's meetings.  We tested several meetings, and if meetings were sent from "the room", they could be cancelled and deleted by a person who was a delegate of the mailbox under "Resource Policy", but when it is sent by "a user", she could only delete the meeting, not cancel it.

I hope this makes sense, and thanks for your help.

Lynn
0
Will SzymkowskiSenior Solution ArchitectCommented:
Not sure if i complete get what you are asking (sorry). What does the AutomateProcessing set to? Are you allowing anyone to book meetings on this calendar automatically? Or are you having a delegate approve the request?

Will.
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

netsysadmInternal Systems AdministratorAuthor Commented:
I'm probably not explaining it properly.  This is all new to me, so it's been trial and error and a lot of searching.  I'm glad I found someone who is familiar with all this.
AutomateProcessing is set to "AutoAccept"
We want to allow anyone to book meetings on this calendar (not sure about automatically? - newbie), but we need one person to be able to cancel and delete ANY meetings (in case the person who set the meeting is away, and we want to free up that room).  Not sure if this explanation is any better.

Lynn
0
Will SzymkowskiSenior Solution ArchitectCommented:
AutoAccept means that users can book meetings on this calendar automatically. AutoUpdate you have intervention required by someone that manages this resource mailbox "like a delegate". In your scenario leaving AutoAccept is what you need. You would then give users that need to be able to delete current Calendar items Full Mailbox Permissions.

Simply  adding Resource Delegates only allows the Delegate to Accept or Decline initial meeting requests. After they have been processed the Delegate cannot remove the item from the calendar. This is why you need to provide Full Mailbox permissions to this or use the Set-MailboxFolderPermission cmdlet example below.

Set-MailboxFolderPermission -Identity user1@domain.com:\Calendar -User User2@domain.com -AccessRights Owner

So rather than give Full Mailbox Access you can grant Owner permissions on the Calendar only.

Will.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
netsysadmInternal Systems AdministratorAuthor Commented:
That sounds like it will work.  My "tester" is out of the office until Monday, so I'll get back to you then.

I've made the change, so now we'll see.

Thank you so much!  Have a good weekend.

Lynn
0
netsysadmInternal Systems AdministratorAuthor Commented:
I gave the user Full Mailbox Access, and she still can't cancel and delete room bookings as a "user" just a room.  As a user, she can only delete bookings, not cancel them.

Lynn
0
Will SzymkowskiSenior Solution ArchitectCommented:
Ahh sorry, i understand what you are trying to do now. Unfortunately this is by design. You will need to login to the room mailbox directly to cancel meetings.

Will.
0
netsysadmInternal Systems AdministratorAuthor Commented:
Okay.  Too bad, but thank you for all your help.
That may still work.  I'll have to talk to the person who will be doing this.
Thanks again Will.

Lynn
0
Will SzymkowskiSenior Solution ArchitectCommented:
Perfect, no worries.

Sorry it was not exactly what you were looking for.

Will.
0
netsysadmInternal Systems AdministratorAuthor Commented:
Excellent response time and technical knowledge about this question.
0
Will SzymkowskiSenior Solution ArchitectCommented:
If you need assistance in the future you can just follow me and i will take a look at your questions.

Will.
0
netsysadmInternal Systems AdministratorAuthor Commented:
Sorry, I don't know how to follow someone and I have a rather important question to ask.

Lynn
0
Will SzymkowskiSenior Solution ArchitectCommented:
You just click on my name (profile) and then click follow when you are on my profile.

Will.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.