"You wanted to change mailbox access permissions for a
maiobox, yet you see the self permission alone on the
permissions list. Why?"
Answer / sumit kumar dhuper
In Microsoft Exchange 2000 Server or Microsoft Exchange
Server 2003, when you create new mailbox-enabled accounts
in Active Directory, they do not have inherited mailbox
rights. The only object that is granted permission is Self,
which is granted full mailbox access and read rights.
To view mailbox rights, follow these steps:
In Active Directory Users and Computers, click Advanced
Features on the View menu.
Note: This is not necessary on Exchange Server 2003 because
of the fact that the Exchange Advanced tab is exposed by
default.
Under Active Directory Users and Computers, click the
account, click the Exchange Advanced tab, and then click
Mailbox Rights.
The rights are displayed in the Permissions for account
name dialog box.
= Bad!
This behavior occurs because the mailbox security
descriptor is not read from the Active Directory account
object until the user logs on or gets mail. The Recipient
Update Service (RUS) does not stamp the inherited
permissions when the mailbox is created. After the mailbox
is created in the store, the store calculates inherited
mailbox rights.
To resolve this behavior perform one of the following
actions:
Log on to the mailbox you've created. You can do so by
opening an Outlook profile for the new user and running
Outlook, or by opening a OWA session the the destination
mailbox by typing http://servername/exchange/username in
the address bar of your browser.
Note: Opening Outlook requires you to be logged on as the
destination user, while OWA does not require you to be
logged on as the user. However, both methods require that
you know the destination user's password.
Send a message to the mailbox.
Note: The second method is quicker and easier to perform,
that's why you'll need to know how to Send Mail from Script
and to Test SMTP Service in IIS and Exchange.
When the mailbox is created in the store, the store itself
calculates the inherited permissions and stamps them on the
store's copy of the mailbox security descriptor.
= Good
| Is This Answer Correct ? | 6 Yes | 0 No |
• When should I run the Setup.exe /forestprep command? What permissions do I need to run the command? • When should I run the Setup.exe /domainprep command? What permissions do I need to run the command? • What is the advantage of doing a /forestprep and /domainprep prior to an Exchange Server 2003 installation?
Can I use the windows 2003 active directory connector with exchange 2003?
In my native e2k3 organization is there any requirement for rpc connectivity between servers?
What is the RUS?
Explain how do I enable the security tab for the organization object?
Exchange group policy notes, what should I do?
Should servers that are running active directory domain controllers and the global catalog be upgraded to 64-bit?
How would you prepare the AD schema in advance before installing Exchange?
Can I view the queues on a per server basis?
I don’t understand clearly about global catalog server. I think we have global catalog server can help improve the respond time user query. But do we need only one or more global catalog server is better. What different effects?
Why must I deploy an exchange 2007 server that has the hub transport server role installed in the same active directory site in which I deployed an exchange 2007 server that has the unified messaging (um) server role installed?
Can I deploy oma in a mixed environment?
Visual Basic (800)
C Sharp (3816)
ASP.NET (3180)
VB.NET (461)
COM+ (79)
ADO.NET (717)
IIS (369)
MTS (11)
Crystal Reports (81)
BizTalk (89)
Dot Net (2435)
Exchange Server (362)
SharePoint (720)
WCF (340)
MS Office Microsoft (6963)
LINQ Language-Integrated Query (317)
WPF (371)
TypeScript (144)
Microsoft Related AllOther (311)