I set this permission by Add-MailboxFolderPermission -Identity ex-employees: -AccessRights Reviewer -User – How can i disable the inheritance of accessrights on the top of information store so the above situation will not accur? Then the next colleague sadly leaves the company and has his box made available in the ex-employees mailbox archive.Ĭolleague2 needs to review ex-employee2’s old email Īdd-MailboxFolderPermission -Identity ex-employees:ex-employee2 -AccessRights Reviewer -User colleague2Īdd-MailboxFolderPermission ex-employees:ex-employee2 -AccessRight Reviewer –User colleague2ĭue to the inheritance of accessrights of the top of information store, colleague1 will have access to both folders ex-employees:ex-employee1 and ex-employees:ex-employee2 The following step will be to give colleague1 rights to the folder of the ex employee, this by doing Add-MailboxFolderPermission ex-employees:ex-employee1 -AccessRight Reviewer –User colleague1 I set this permission by Add-MailboxFolderPermission -Identity ex-employees: -AccessRights Reviewer -User colleague1 A current colleague, called colleague1, needs to access this folder ( reviewer permission ) I have a question about the permission inheritance of the “Top of Information Store”. I’ve also noticed, If I add an item to the specific calendar folder and then open it again, down in the bottom right it’s says “Last modified by User A”, when I was expecting “Last modified by ”, which leads me to suspect I’m being allowed access to everything in User A’s mailbox, because somehow my access is being granted via ‘impersonation’ of User A somehow?ĭue to HTML formating i reformatted my question I can open it and see all the sub-folders (great), I can open the specific calendar folder and see, create and edit (great), I can see the contents of all the mail folders (not so great), I can delete any item in the folders I care to (REALLY not great!). When I log on as a user who is a member of Group A, add User A’s mailbox as an additional mailbox to the Outlook profile, the mailbox appears. So I’ve added Group A to the TopOfInfoStore with “Folder Visible” of User A’s mailbox, then I’ve added Group A to the permissions of only the specific calendar folder with PubEd rights.
Mac mail exchange 2013 full#
I’m trying to grant access to a group of users (Group A), allowing full access (Pub Ed) rights to a specific calendar folder only in User A’s mailbox.
The first step is to grant permissions (in this case “Reviewer”) to the “Top of Information Store”. Instead we need to use the Exchange Management Shell and run the Add-MailboxFolderPermission cmdlet. Where some admins get stuck is in the Exchange Management Console, which only presents the option to grant full access to a mailbox. But I will assume that if you’re reading this you have been asked to handle it for them ? It is worth noting that the mailbox owner can configure these permissions themselves using Outlook. To meet the requirements of this scenario we need to grant Alan read-only access to Alex’s mailbox, not full access, and without making him a delegate. With no access configured Alan gets an error message when he tries to open Alex’s inbox in Outlook. Let’s look at the scenario of Alan Reid trying to access the mailbox of Alex Heyne.
This is a common scenario and the solution is reasonably simple though perhaps not obvious. Brian asks about granting a user read-only access to the mailbox and calendar of another user in an Exchange Server organization.