Admin User Denied Full Mailbox Access

[epsilon6]

I am trying to access a users mailbox without changing the username and password. I can logon as a Different user and access it, however, my System Administrator account cannot access it.

When I view the permissions, it says the Full Mailbox is Allowed, then Denied. I realize the denied permission wins, but how do I remove it. Here is what the Permissions says:

Deny\Exchange Domain Servers\FUll mailbox access\Parent Object
Deny\Domain Admins\Full mailbox access\Parent Object
Deny\Enterprise Admins\Full mailbox access\Parent Object
Deny\SuperUser\Full mailbox access\Parent Object

How do I remove these?

 

[markdmac]

You need to explicitly add the right you want. Also grant send/receive as rights depending on what you want to do.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[RichardHuang]

The exchange grants deny by default to the admin account on some rights, like "send as". Actually it is a lot easier to find another regular account and grant the permissions you need, than change the admin accounts. You could use that account to conduct the operation you want.

 

[58sniper]

I agree. I usually create an Exchange Admin account that can do those things.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt