Petri.com forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Messaging Software > Exchange 2000 / 2003
Petri.com is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

Mailbox Store Permissions & Mailbox Rights

Mailbox Store Permissions & Mailbox Rights

this thread has 1 replies and has been viewed 2851 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 4th February 2010, 19:20
rsnooks rsnooks is offline
Casual
Casual
 
 Join Date: Sep 2008
  6 month star 12 month star
 Posts: 36
 Reputation: rsnooks is on a distinguished road (10)
Default Mailbox Store Permissions & Mailbox Rights

Hi All,

Not sure if this is a unique situation we have here, as i assume most people would use the three Exchange Administrator roles... but i'd like you pick your brains anyway!

We are currently locking down all of the permissions that out Service Desk staff have, this includes Administrator Access to exchange.

Our Service Desk deal with requests regarding granting Mailbox Rights through Active Directory > Exchange Advanced.

If they are anything less than Exchange Full Administrator, they are unable to grant users access to other mailboxes.

I have been looking at the special permissions on the mailbox stores and have noticed that there are the following permissions:

"Change Permissions"
"Administer Information Store"

After granting our Service Desk access to the "Change Permissions" permission, nothing changed... they was still unable to edit Mailbox Rights. They get the error "Unable to save permission changes to [mailbox]. Access is denied.".

Is it safe to assume that for the Service Desk to be able to edit the Mailbox Rights through Active Directory > Exchange Advanced, that they need access to the "Administer Information Store" permission or is there another way i can do this without them having such power?

Thanks in advance!

Last edited by rsnooks; 4th February 2010 at 19:30..
  #2  
Old 6th February 2010, 03:51
Sembee's Avatar
MVP Sembee Sembee is offline
MVP
MVP
 
 Join Date: Apr 2006
  6 month star 12 month star
 Location: Newbury, UK
 Posts: 6,476
 Reputation: Sembee has much to be proud ofSembee has much to be proud ofSembee has much to be proud ofSembee has much to be proud ofSembee has much to be proud ofSembee has much to be proud ofSembee has much to be proud ofSembee has much to be proud ofSembee has much to be proud of (1116)
Default Re: Mailbox Store Permissions & Mailbox Rights

The ability to lock down permissions on Exchange 2003 is very limited.
As a bare minimum they will need Exchange View Only rights at the org level, which allows them to work on objects that are Exchange enabled.

However, it sounds like you have either forgotten or are not aware of the main problem with Exchange permissions - they are cached. A permission change can take 2 hours before it is fully effective, so making a change and testing it immediately will give you false results.

Simon.
__________________
--
Simon Butler
Exchange MVP

Blog: http://blog.sembee.co.uk/
More Exchange Content: http://exchange.sembee.info/
Exchange Resources List: http://exbpa.com/
In the UK? Hire me: http://www.sembee.co.uk/

Sembee is a registered trademark, used here with permission.
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Mailbox Store Move speary Exchange 2000 / 2003 1 1st February 2010 15:50
mailbox rights tmel173 Exchange 2000 / 2003 10 29th August 2008 22:27
Dismount mailbox store always dakshespatel Exchange 2000 / 2003 6 30th August 2007 05:57
Can't see mailbox in mail store tnshurtm Exchange 2000 / 2003 11 21st June 2007 18:54
Mailbox Store Permissions bredinger Exchange 2000 / 2003 5 29th May 2006 05:36


All times are GMT +3. The time now is 07:18.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri