Solved

Exchange 2010. Grant Full Access to all mailboxes for a user [without them getting added within the user's OST].

Posted on 2016-10-14
10
71 Views
Last Modified: 2016-11-15
Hello,

A manager wants access to all users' mailboxes.  I want to go to Exchange Management Console; then access each mailbox and give Full Access to each mailbox.

However, she would like each mailbox available as an individual profile in Outlook.  We don't want each mailbox to automatically populate within her mailbox...or her OST will get very large and create problems.

How can I do this?

Thanks in advance.

Regards,
Real-Timer
0
Comment
Question by:realtimer
  • 4
  • 2
  • 2
10 Comments
 
LVL 18

Accepted Solution

by:
Raheman M. Abdul earned 275 total points (awarded by participants)
Comment Utility
do for each staff member :
$user1 = "staff1@domain.com"
$manager = "manager@domain.com"

Add-MailboxPermission -Identity $user1  -User $manager  -AccessRights FullAccess -AutoMapping:$false

Open in new window

this wont add into manager's outlook but manager can open it using "open other user's mailbox" in her outlook or she can access the mailbox by  using outlook profile using her credentials
0
 
LVL 14

Assisted Solution

by:Todd Nelson
Todd Nelson earned 225 total points (awarded by participants)
Comment Utility
Or if you need to assign permissions to the same manager for all mailboxes, run this command

Get-Mailbox | Add-MailboxPermission -User "ManagerName" -AccessRights FullAccess -AutoMapping $false

Open in new window


Or if you need to only provide the manager with access to a specific list of users, create a CSV file with the names of the user mailboxes and the manager.

CSV File Sample named GiveAccess.csv...

Manager,User
Mary,John
Mary,Joe
Mary,Jane

Open in new window


The run a command similar to this...

Import-Csv "C:\GiveAccess.csv" | ForEach-Object { Add-MailboxPermission -Identity $_.User -User $_.Manager -AccessRights FullAccess -AutoMapping $false }

Open in new window


Hope that helps.
0
 
LVL 18

Expert Comment

by:Raheman M. Abdul
Comment Utility
correction in my script:
use:
-AutoMapping $false

Open in new window

 instead of -AutoMapping:$false
0
 

Author Comment

by:realtimer
Comment Utility
Thank you all.  If I may ask just one more follow up question.  Is there a command I can run that will list which mailboxes that the manager has access to?
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 14

Assisted Solution

by:Todd Nelson
Todd Nelson earned 225 total points (awarded by participants)
Comment Utility
Give this a try...

Get-Mailbox | Get-MailboxPermission | Where-Object { $_.User.tostring() -eq "DOMAIN\ManagerName" -and $_.IsInherited -eq $false }

Open in new window

0
 
LVL 14

Expert Comment

by:Todd Nelson
Comment Utility
Realtimer,

I don't object with the answer you chose but I do object to not selecting any additional answers given your request for "all users' mailboxes" and your second request.

A manager wants access to all users' mailboxes.

Yes, it can be done on a user by user basis as Raheman provided, but that would take a long time for you to enter each name and run the command for each individual mailbox.  It is much more efficient to run commands for "all users' mailboxes" as you stated using a blanket command or CSV file.

If I may ask just one more follow up question.  Is there a command I can run that will list which mailboxes that the manager has access to?

You asked an additional question too that should be awarded appropriately.

Please reconsider the awarding of the points appropriately.
0
 

Author Comment

by:realtimer
Comment Utility
Agreed - it was an overly hasty click and complete.  I'll be happy to reopen and awards points and rectify my error.
0
 
LVL 14

Expert Comment

by:Todd Nelson
Comment Utility
Split points
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now