Exchange 2007 Account Inheritance issue on Full Permissions

Hello Experts,

Recently we have noticed that in one of our exchange server all the mailboxes has lost access to one of our admin account.
To tackle this issue temporarily, I have used the following power-shell command:
Get-Mailbox -Database “Server\Database” | Add-MailboxPermission -user 'accountname' -AccessRights 'FullAccess' -InheritanceType All

This command has added the admin user on full permissions to all the mailboxes on the server, but when I create new mailbox on the server, the admin account is not getting added on full permissions  for the new mailbox.

I request your help to get help and troubleshoot this issue.
Moinuddin_ImamAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Md. MojahidCommented:
Mailbox Rights for New Users Shows Only Self
http://support.microsoft.com/kb/272153/en-us
 
The permissions inheritance and the permissions will appear only after the creation of mailbox. The mailbox will be created only after we send an email to the mailbox or try to access the mailbox. This behavior occurs because the mailbox security descriptor is not read from the Active Directory account object until the user logs on or gets mail. The Recipient Update Service does not stamp the inherited permissions when the mailbox is created. After the mailbox is created in the store, the store calculates inherited mailbox rights.
 
and similar question ask here before

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_22704560.html
0
Manikandan NarayanswamySecurity Specialist & IBM Security GuardiumCommented:
Hi,

So you mean to say that the Admin user doesn't have the rights to manage the Recipient mailboxes. Check if the Admin account is added to the Recipient Management group.

Thanks
Manikandan
0
Moinuddin_ImamAuthor Commented:
I have checked the suggested solution earlier, it does not work here.
The issue is that this problem is only with one exchange server within the environment. When the user mailbox is created on exchange server 1 and inheritance does not work for the admin account.

However, if the user mailbox is created on other exchange server, the inheritance works perfectly fine for the admin account. I have checked the recipient management group and the admin account is a member of the group.
0
Manikandan NarayanswamySecurity Specialist & IBM Security GuardiumCommented:
Hi,

Can you run the following command on the server you're having issues and see if the inheritance works for the admin account. The same is been suggested on a previous case on expert-exchange hence i would recommend you to try the same.

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_22704560.html

Add-ADPermission -Identity "Mailbox Store" -User "domain\user" -ExtendedRights Send-As, Receive-As, ms-Exch-Store-Admin

Thanks
Manikandan
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.