Comments on: Unexpected Permissions Appearing on Exchange Server Mailboxes

By: Sammie C

Sammie C — Tue, 31 Jul 2018 21:12:18 +0000

An account in our environment has full access rights to all the mailboxes in every database on our servers. It appears they are being inherited from the Enterprise Admins group which of course has full access rights at the root level. Is there a way to remove the full access rights in exchange AND prevent these rights from being applied to this user for all future mailboxes?

By: Sarfraz Aslam

Sarfraz Aslam — Wed, 25 Nov 2015 08:39:04 +0000

How can i view specific Mailbox Database Full access and SendAs permissions in PS exchange 2010.

By: Xtian-tech

Xtian-tech — Thu, 29 Oct 2015 00:31:09 +0000

In reply to Paul Cunningham. Thanks heaps!

By: Paul Cunningham

Paul Cunningham — Wed, 28 Oct 2015 23:53:37 +0000

In reply to Xtian-tech. No.

By: Xtian-tech

Xtian-tech — Wed, 28 Oct 2015 23:33:01 +0000

Hello Paul,

Does the command on giving full access to all mailboxes will also automap all the mailboxes into this user’s Outlook?

By: Paul Cunningham

Paul Cunningham — Fri, 21 Aug 2015 21:43:01 +0000

In reply to Jeff. The examples above are for permissions on a mailbox database. Once the permissions are removed from the database as shown, they no longer inherit to all the mailboxes in that database. So you don't need to "touch" every mailbox, just the databases.

By: Jeff

Jeff — Fri, 21 Aug 2015 20:07:02 +0000

Paul,

Is there a way this can be completed for all mailboxes in the org, and for multiple abandoned SIDs per mailbox? We have fixed the issue when new mailboxes are created, but wanting a way to cleanup all the 2800+ mailboxes without having to touch each one twice.

-Jeff

By: Ian G

Ian G — Sun, 21 Jun 2015 03:01:14 +0000

In reply to Paul Cunningham. Ah, of course. Thanks for pointing out the obvious. Cheers!

By: Paul Cunningham

Paul Cunningham — Sat, 20 Jun 2015 02:18:13 +0000

In reply to Ian G. You can see it in ADSIEdit by opening the Configuration partition.

By: Ian G

Ian G — Fri, 19 Jun 2015 21:13:03 +0000

Hi Paul,

I realise this is a somewhat older post at this point but I did have a question related to the inheritance at the database level, I see that some of the permissions in that database have also been inherited from some higher level container. What container exists above the database that these permissions are being applied from?

Is there a good resource for the Exchange 2010 inheritance hierarchy?