Re: Help, I moved mailboxes and now can open boxes using "Service account admin" rights

Administrator group access is "deny" by default and is inherited. If you add an
explicit grant permission it will override the inherited permission. That is
what you did when you added your own accounts. Just add the group in the same
way. Its all in the documentation. The permissions can be added at the SG level
or at an individual account level.

On Mon, 04 Dec 2006 17:52:42 GMT, "Clayton Sutton" <none@xxxxxxxx> wrote:

Okay,

It looks like I have it working for now. It seems that the "group" that I
gave "Service accout" admin rights to is not working on the "moved" DBs for
some reason. Even though the group is on the security tab with "full"
rights.

I went ahead and just added my AD account the the security tab and gave it
"full" rights and everything started working. If anyone has any ideas on
how to get the group working again that would be great. I will try (at a
later time) to delete the group from those DBs and re-add the group and is
if that fixes that problem.

Thanks for everyone's help.


Clayton



"Clayton Sutton" <none@xxxxxxxx> wrote in message
news:JKYch.372452$PE1.212973@xxxxxxxxxxxxxxxxxxxxxxxxx
Hey Betelgeuse,

I checked the permissions on all the DBs and they seem to be the same.
That's what's getting me. It "looks" like "Service account" admin rights
are already on those problem DBs.


TIA,


Clayton


"Clayton Sutton" <none@xxxxxxxx> wrote in message
news:srYch.290637$g12.47922@xxxxxxxxxxxxxxxxxxxxxxxxx
Hey everyone,

We are running a Windows 2003 domain and Exchange 2003 sp1 on Win2k3 in a
cluster. We had ONE storage group and 4 DBs. I have a AD group that has
Exchange "Service account admin" rights and people in that group could
open ANY mailbox. I am in that group too.

Over the weekend we created a NEW storage group in Exchange and MOVED tow
DBs from SG1 to SG2 (the new SG). Now I can't open anyone's mailbox that
is in the new SG. The users are working fine. They can connect to their
mailboxes using Outlook 2003 just fine. However, I am troubleshooting a
BlackBerry issue and need access to the user's mailbox.

TIA,


Clayton




--
Dave Mills
There are 10 type of people, those that understand binary and those that don't.
.

Relevant Pages

  • Re: Membership in Admin groups resets Send As permissions - Blackberrys broken for administrator
    ... permission. ... one possible 'best practice' is to remove my 'normal' account ... are non operational with administrator accounts. ... The adminSDHolder object is a template for accounts that have broad ...
    (microsoft.public.exchange.admin)
  • RE: OWA Exchange 2007 - Client Access
    ... Do you access the "room" mailbox or the problematic user's mailbox itself ... when the user keeps getting prompted for logon credencials. ... Add User A account to the list. ... Highlight User A account and assign the Send As and Receive As permission ...
    (microsoft.public.exchange.connectivity)
  • RE: OWA Exchange 2007 - Client Access
    ... Add User A account to the list. ... Highlight User A account and assign the Send As and Receive As permission ... If a user account is a member of one of these administrative groups because ... 2.Please capture the screenshot of OWA logon when the user keeps getting ...
    (microsoft.public.exchange.connectivity)
  • Re: send as permission
    ... The Installation Guide references Exchange 2007 but the instructions are identical for 2003. ... This will give the BESAdmin account the Send As permission for all user objects. ... If you only have 20 users you can set the permission on just those manually or via a script, but you'll have to remember to grant the permission to any future BB users. ...
    (microsoft.public.exchange.admin)
  • Re: What right allows full access?
    ... How to grant permission to the Users group on those areas where my non-admin ... > the Users group on those areas where your non-admin account ... > taking ownership as an admin _might_ be needed. ...
    (microsoft.public.windowsxp.security_admin)