Permissions for all mailboxes

<< Click to Display Table of Contents >>

Navigation:  Add Scan Dialog > Scan Exchange Server >

Permissions for all mailboxes

Please execute the following steps to create a new user with sufficient permissions for all mailboxes:

Create a user in your Active Directory

1.Open "Active Directory Users and Computers" ("Control Panel > Administrative Tools") on your domain controller.

2.Chose the domain in which your Exchange Server is located in.

3.Create a new user in the desired "Organizational Unit" (e.g. "Users").
Importent: Please do not use an Administrator Account. It is important to create a new dedicated user (e.g. "SpaceObServerExchangeUser").

4.Please note that the user has to have a password.

Hint: By default the user password is valid for max. one year. To obtain a persistently valid password you have to active the option "Password never expires".

Create a mailbox on the Exchange Server (Exchange 2007 - 2010)

1.Open "Exchange Management Console" ("Start > Programs > Microsoft Exchange Server 2007 (respectively 2010)") on your Exchange Server.

2.Navigate to "Recipient Configuration > Mailbox".

3.Create a new user mailbox for the formerly created user. Please follow the instructions of the "New Mailbox" wizard.

Create a mailbox on the Exchange Server (Exchange 2013 - 2016)

1.Open "Exchange Admin Center" Website. ("Start > Microsoft Exchange Server 2013 (respectively. 2016)").

2.Navigate to "Recipients > Mailboxs".

3.Create a new user mailbox for the formerly created user. Please follow the instructions of the "New Mailbox" wizard.

Create a security group in your Active Directory

1.Open "Active Directory Users and Computers" ("Control Panel > Administrative Tools") on your domain controller.

2.Create a new group of the group type "Security" in the desired "Organizational Unit" (e.g. "Builtin").

3.Add the formerly created user to the new group.

Grant access to all mailboxes (2010 - 2016)

1.Open "Active Directory Users and Computers" ("Control Panel > Administrative Tools") on your domain controller.

2.Add the formerly created security group to the group "Exchange Servers" included in the "Organizational Unit" "Microsoft Exchange Security Groups".

Grant access to single mailboxes (2010 - 2016)

1.Open "Exchange Admin Center" Website. ("Start > Microsoft Exchange Server 2013 (respectively. 2016)").

2.Navigate to "Recipients > Mailboxs".

3.Edit the mailbox: Add the formerly created user to "Mailbox Delegation > Full Access".
 
Alternativly you could add a security group using Powershell:
Add-MailboxPermission -Identity '<primäre-email>' -User '<domain>\Exchange Servers' -AccessRights 'FullAccess'

Grant access to mailboxes (2007)

1.Open "Active Directory Users and Computers" ("Control Panel > Administrative Tools") on your domain controller.

2.Add the formerly created security group to the group "Exchange Servers" included in the "Organizational Unit" "Microsoft Exchange Security Groups".

3.Grant the permissions of the "Exchange Servers" group:
 
Note: The following steps have to be processed for all mailboxes that will be scanned by SpaceObServer
- Open "Exchange Management Console".
- Choose "Recipient Configuration > Mailbox".
- Right click on the formerly created user.
- Choose "Manage Full Access Permission" in the context menu.
- Add the "Exchange Servers" group and click "Manage".
 
Use the following script as an alternative to the steps above
In the "Exchange Management Shell":
 
       Add-MailboxPermission -Identity '<primary_email>' -User '<domain>\Exchange Servers' -AccessRights 'FullAccess'
 
Just replace "<primary_email>" and "<domain>" with your specifications.

 
Important: After executing the steps above you should restart the service "Microsoft Exchange Information Store" on your Exchange Server. This will apply the modifications to the Exchange Server immediately. Otherwise please wait a few Minutes.