Manage full access permissions and commands on mailboxes in Exchange 2010

Reply

Abdulrahman Shaheen Posted: 07-13-2010 11:18 AM

rated by 0 users

Manage full access permissions on mailboxes in Exchange 2010




Just a couple of quick tips on how to manage full access permissions on mailboxes in Exchange 2010.



Grant permissions on a single mailbox
Use the following command to grant access to just one mailbox for a single user:
Add-MailboxPermission -Identity "<TargetMailbox>" -User <UserToGrantPermissionsTo> -AccessRights Fullaccess -InheritanceType all
Example:
Add-MailboxPermission -Identity "Test" -User Administrator -AccessRights Fullaccess -InheritanceType all


Grant permissions on all mailboxes
Use the following command to grant access to all mailboxes for a single user:
Get-Mailbox | Add-MailboxPermission -User <UserToGrantPermissionsTo> -AccessRights Fullaccess -InheritanceType all
Example:
Get-Mailbox | Add-MailboxPermission -User Administrator -AccessRights Fullaccess -InheritanceType all
Note: In the screenshot below I received a message saying that Administrator already have access to the mailbox Test (Yellow text message).


Grant permissions on mailboxes using Where
We might as well add a where to the command while we are at it. With this command we grant access to all mailboxes in a specific OU for a single user:
Get-Mailbox | Where { $_.OrganizationalUnit –eq “<OrganizationalOUPath>” } | Add-MailboxPermission -User <UserToGrantPermissionsTo> -AccessRights Fullaccess -InheritanceType all
Example:
Get-Mailbox | Where { $_.OrganizationalUnit –eq “sundis.local/Test/Users” } | Add-MailboxPermission -User Administrator -AccessRights Fullaccess -InheritanceType all


Remove permissions on a single mailbox
Quite simple, just change Add to Remove:
Remove-MailboxPermission -Identity "<TargetMailbox>" -User <UserToRemovePermissionsFor> -AccessRights Fullaccess -InheritanceType all
Example:
Remove-MailboxPermission -Identity "Test" -User Administrator -AccessRights Fullaccess -InheritanceType all


Remove permissions on all mailboxes
Well you have probably figured this one out already, but I will show it to you anyway:
Get-Mailbox | Remove-MailboxPermission -User <UserToGrantPermissionsTo> -AccessRights Fullaccess -InheritanceType all
Example:
Get-Mailbox | Remove-MailboxPermission -User Administrator -AccessRights Fullaccess -InheritanceType all
Note: As you can se below, using this command will remove the users full access to its own mailbox. That is not good, this command should be used with care…




Thanks for reading, I hope that you found it useful.