Can you help with FullAccess on a Storage group? There are a few areas I've looked at using the Get-MailboxDatabase cmdlet, but the "-Identity" piece/parameter isn't working for me. One caveat is that my databases (I have 4 storage grps) are on different drives (e.g. G:\ and F:\) so obviously my syntax is wrong somewhere in the path. This is what I tried: Get-MailboxDatabase -Identity "Servername\G:\Storage Group\DBName.edb" | Add-ADPermission -User Me.User -AccessRights GenericAll
Your stated by default, only members of the Exchange Organization Admin Role could run the add-mailbox permission.
Is there a way to modify the permissions to allow Exchange Recipent Administrators to use this command?
We are currently in a multidomain environment where the domain administrators are also exchange admins for users in their domain and have the Exchange Recipient Administrator Role assigned. The goal is to have the domain admins to have full access to manage mailboxes only in their respective domains.
Hi, Thanks for the lead - since the exchange administrator is also a domain administrator , he was specificly denied. We also are multi domain (politicly) this solved it Get-MailboxDatabase | SetAdPermission -User domain\user -AccessRights extendedright -ExtendedRights "Send As" And the same for "Receive As"
Posts
8 comments:
And if anyone cares, 'send-as' is issued as an ExtendedRight with the Add-ADPermission cmdlet.
That is correct and part 2 goes over the Add-AdPerms :)
Can you help with FullAccess on a Storage group? There are a few areas I've looked at using the Get-MailboxDatabase cmdlet, but the "-Identity" piece/parameter isn't working for me. One caveat is that my databases (I have 4 storage grps) are on different drives (e.g. G:\ and F:\) so obviously my syntax is wrong somewhere in the path. This is what I tried:
Get-MailboxDatabase -Identity "Servername\G:\Storage Group\DBName.edb" | Add-ADPermission -User Me.User -AccessRights GenericAll
Thanks a bunch!
Shane,
First question what is your goal that you are attempting?
Send you dont need the drive path in the syntax it should be
get-mailboxdatabase Servername\dbname
if you are on the server you dont even need the servername
use the get-mailboxdatabase to get your name to validate and if you have any spaces add quotes get-mailboxdatabase "edb 1"
Shane,
Your stated by default, only members of the Exchange Organization Admin Role could run the add-mailbox permission.
Is there a way to modify the permissions to allow Exchange Recipent Administrators to use this command?
We are currently in a multidomain environment where the domain administrators are also exchange admins for users in their domain and have the Exchange Recipient Administrator Role assigned. The goal is to have the domain admins to have full access to manage mailboxes only in their respective domains.
Thanks
Let me doublecheck but I believe as along a you delegate the change permission to a user they will be able to run the command and modify the perms.
Thanks Shane,
Can you delegate the change permission to a security group as well?
Thanks
John
Hi,
Thanks for the lead - since the exchange administrator is also a domain administrator , he was specificly denied. We also are multi domain (politicly)
this solved it
Get-MailboxDatabase | SetAdPermission -User domain\user -AccessRights extendedright -ExtendedRights "Send As"
And the same for "Receive As"
Post a Comment