I cannot change the mailbox rights in AD:users and computers

[mskennicutt]

I am logged into our new exchange server as a domain admin. When I open a user's properties window, go to the Exchange Advanced tab and click on Mailbox Rights, the permission checkboxes are greyed out as if they are being inherited from a parent object, but there is no checkbox to disallow inherited permissions like there typically is under an ACL? Is there a way to stop this inheritance of permissions so that I can alter the mailbox rights? I have tried going into the advnaced permissions screen to no avail. What would the parent object be anyway of a user's mailbox?

 

[icvanstra]

Just to clarify: are you logged in as a domain admin or an exchange admin? With E2K domain admins are not granted all the rights. You will need to delegate control within Exchange System Manager.

 

[mskennicutt]

Hmmm... I am a enterprise/domain/schema admin... what do you mean exchange admin? Are you talking about an actual group in Active Directory I am not aware of? The only new groups I see after I install Exchange are "Exchange Enterprise Servers" and "Exchange Domain Servers". I have access to the Exchange system manager but I'm not sure where to give myself rights to the mailboxes. I've checked the ACL in the mailbox store and given my admin account full control and I unchecked 'allow inheritable permissions to propagate..." but I still can't change permissions in the mailbox rights window??

 

[phlip122]

Did you ever resolve this as I am havin the same problem. I am delagated Full Exchange Admin, but still cannot get rid of the inherited permissions either in AD Users, or on the mailbox folder itself.

 

[PHead2]

The options are grayed out for any users who are granted Exchange admin rights in the exchange systems manager. If you add other users the boxes will not be grayed.

Open the system manager and right click on the first node in the tree. Pick 'Delegate Control'. You can then assign/change/remove exchage rights.