Exchange 2010. Grant Full Access to all mailboxes for a user [without them getting added within the user's OST].

Hello,

A manager wants access to all users' mailboxes.  I want to go to Exchange Management Console; then access each mailbox and give Full Access to each mailbox.

However, she would like each mailbox available as an individual profile in Outlook.  We don't want each mailbox to automatically populate within her mailbox...or her OST will get very large and create problems.

How can I do this?

Thanks in advance.

Regards,
Real-Timer
realtimerAsked:
Who is Participating?
 
Raheman M. AbdulConnect With a Mentor Senior Infrastructure Support Analyst & Systems DeveloperCommented:
do for each staff member :
$user1 = "staff1@domain.com"
$manager = "manager@domain.com"

Add-MailboxPermission -Identity $user1  -User $manager  -AccessRights FullAccess -AutoMapping:$false

Open in new window

this wont add into manager's outlook but manager can open it using "open other user's mailbox" in her outlook or she can access the mailbox by  using outlook profile using her credentials
0
 
Todd NelsonConnect With a Mentor Systems EngineerCommented:
Or if you need to assign permissions to the same manager for all mailboxes, run this command

Get-Mailbox | Add-MailboxPermission -User "ManagerName" -AccessRights FullAccess -AutoMapping $false

Open in new window


Or if you need to only provide the manager with access to a specific list of users, create a CSV file with the names of the user mailboxes and the manager.

CSV File Sample named GiveAccess.csv...

Manager,User
Mary,John
Mary,Joe
Mary,Jane

Open in new window


The run a command similar to this...

Import-Csv "C:\GiveAccess.csv" | ForEach-Object { Add-MailboxPermission -Identity $_.User -User $_.Manager -AccessRights FullAccess -AutoMapping $false }

Open in new window


Hope that helps.
0
 
Raheman M. AbdulSenior Infrastructure Support Analyst & Systems DeveloperCommented:
correction in my script:
use:
-AutoMapping $false

Open in new window

 instead of -AutoMapping:$false
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
realtimerAuthor Commented:
Thank you all.  If I may ask just one more follow up question.  Is there a command I can run that will list which mailboxes that the manager has access to?
0
 
Todd NelsonConnect With a Mentor Systems EngineerCommented:
Give this a try...

Get-Mailbox | Get-MailboxPermission | Where-Object { $_.User.tostring() -eq "DOMAIN\ManagerName" -and $_.IsInherited -eq $false }

Open in new window

0
 
Todd NelsonSystems EngineerCommented:
Realtimer,

I don't object with the answer you chose but I do object to not selecting any additional answers given your request for "all users' mailboxes" and your second request.

A manager wants access to all users' mailboxes.

Yes, it can be done on a user by user basis as Raheman provided, but that would take a long time for you to enter each name and run the command for each individual mailbox.  It is much more efficient to run commands for "all users' mailboxes" as you stated using a blanket command or CSV file.

If I may ask just one more follow up question.  Is there a command I can run that will list which mailboxes that the manager has access to?

You asked an additional question too that should be awarded appropriately.

Please reconsider the awarding of the points appropriately.
0
 
realtimerAuthor Commented:
Agreed - it was an overly hasty click and complete.  I'll be happy to reopen and awards points and rectify my error.
0
 
Todd NelsonSystems EngineerCommented:
Split points
0
All Courses

From novice to tech pro — start learning today.