Exchange 2010. Grant Full Access to all mailboxes for a user [without them getting added within the user's OST].

Hello,

A manager wants access to all users' mailboxes.  I want to go to Exchange Management Console; then access each mailbox and give Full Access to each mailbox.

However, she would like each mailbox available as an individual profile in Outlook.  We don't want each mailbox to automatically populate within her mailbox...or her OST will get very large and create problems.

How can I do this?

Thanks in advance.

Regards,
Real-Timer
realtimerAsked:
Who is Participating?
 
Raheman M. AbdulSenior Infrastructure Support Analyst & Systems DeveloperCommented:
do for each staff member :
$user1 = "staff1@domain.com"
$manager = "manager@domain.com"

Add-MailboxPermission -Identity $user1  -User $manager  -AccessRights FullAccess -AutoMapping:$false

Open in new window

this wont add into manager's outlook but manager can open it using "open other user's mailbox" in her outlook or she can access the mailbox by  using outlook profile using her credentials
0
 
Todd NelsonSystems EngineerCommented:
Or if you need to assign permissions to the same manager for all mailboxes, run this command

Get-Mailbox | Add-MailboxPermission -User "ManagerName" -AccessRights FullAccess -AutoMapping $false

Open in new window


Or if you need to only provide the manager with access to a specific list of users, create a CSV file with the names of the user mailboxes and the manager.

CSV File Sample named GiveAccess.csv...

Manager,User
Mary,John
Mary,Joe
Mary,Jane

Open in new window


The run a command similar to this...

Import-Csv "C:\GiveAccess.csv" | ForEach-Object { Add-MailboxPermission -Identity $_.User -User $_.Manager -AccessRights FullAccess -AutoMapping $false }

Open in new window


Hope that helps.
0
 
Raheman M. AbdulSenior Infrastructure Support Analyst & Systems DeveloperCommented:
correction in my script:
use:
-AutoMapping $false

Open in new window

 instead of -AutoMapping:$false
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
realtimerAuthor Commented:
Thank you all.  If I may ask just one more follow up question.  Is there a command I can run that will list which mailboxes that the manager has access to?
0
 
Todd NelsonSystems EngineerCommented:
Give this a try...

Get-Mailbox | Get-MailboxPermission | Where-Object { $_.User.tostring() -eq "DOMAIN\ManagerName" -and $_.IsInherited -eq $false }

Open in new window

0
 
Todd NelsonSystems EngineerCommented:
Realtimer,

I don't object with the answer you chose but I do object to not selecting any additional answers given your request for "all users' mailboxes" and your second request.

A manager wants access to all users' mailboxes.

Yes, it can be done on a user by user basis as Raheman provided, but that would take a long time for you to enter each name and run the command for each individual mailbox.  It is much more efficient to run commands for "all users' mailboxes" as you stated using a blanket command or CSV file.

If I may ask just one more follow up question.  Is there a command I can run that will list which mailboxes that the manager has access to?

You asked an additional question too that should be awarded appropriately.

Please reconsider the awarding of the points appropriately.
0
 
realtimerAuthor Commented:
Agreed - it was an overly hasty click and complete.  I'll be happy to reopen and awards points and rectify my error.
0
 
Todd NelsonSystems EngineerCommented:
Split points
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.