Link to home
Start Free TrialLog in
Avatar of Brian Top-Rasmussen
Brian Top-Rasmussen

asked on

AD group based ACL for MS Exchange Shared Mailboxes

Hi all,

The case:

We do have a bunch of users that need access to a bunch of different shared mailboxes.
I have found several answers that points in several directions on several forums, neither have delivered a workable solution.


Desired solution:

Use AD groups to grant access to the shared mailboxes, so they are usable within Outlook.


What have we tried so far:

Created a Universal Security Group that is mail enabled - doesn't work (but access is granted through webmail with Open Another mailbox option)
Added MailboxPermission to the shared mailbox with FullAccess rights and AutoMapping $true for the Universal Security Group
Added group (DN) to msExchDelegateListLink on the shared mailbox


Tech Spec.:

Exchange 2016 CU10 On-prem in hybrid mode
Exchange Online isn't used in this case (but could be in a possible solution)
Outlook v18.10 build 11001.20108 via Office 365 installation (C2R)
Windows 10 1709/1803

I'm not sure whether it's actually possible or not to use a group based acl for a shared mailbox.

Hopefully someone has invented the deep plate and accomplished this before...


Brgds.

Brian
ASKER CERTIFIED SOLUTION
Avatar of Shreedhar Ette
Shreedhar Ette
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Brian Top-Rasmussen
Brian Top-Rasmussen

ASKER

Hi Shreedhar,

Not that I like the solution but it's verified and solves the issue.

It's not your fault and I thank you for pointing me in the right direction, but never the less, it would be a preferable function from Microsoft to support AutoMapping via groups.