4.2.3. Grant Full Mailbox Permissions in MS Exchange Server 2003 and 2000

In Exchange Server 2003 and 2000, by default even accounts having Enterprise Administrator privileges are not allowed to access all mailboxes of the Exchange Server. Even administrators have no right to open mailbox on any of the servers. Thus, you can access only mailboxes of your account, even if you have full admin, domain admin or enterprise admin rights. This limitation can be overcome by certain methods. But these methods can be applied only if they confer with security and privacy policies. We will discuss these methods to grant Full Mailbox Permission access rights in detail.

Access a Single Mailbox:

If you have the proper Exchange Server administrative rights, you can follow the underlying procedure to access a single mailbox in Exchange 2003 and 2000.

1. Click Start menu.

2. In Run dialog box, type mmc dsa.msc.

3. Click OK. Active Directory window is displayed.

4. If Advanced Features is not selected, select it in View menu options.

5. In the list of users shown in Active Directory, right-click on the user whose mailbox permission is to be given. Select Properties option.

6. In the [User] Properties dialog box, click Exchange Advanced tab.

7. In Exchange Advanced window, click Mailbox Rights button. [User] Permission dialog box is displayed.

8. In Permission dialog box, click the user or group whose mailbox is to be accessed. If user is not present in the list click Add button. Enter the object name and click OK.

9. Select Full mailbox access option under Allow column.

10. Click Apply and then click OK.

 

Access to Mailboxes of a Specific Mailbox Store:

If you have proper Exchange Server administrative rights, you can follow the underlying procedure to access mailbox on a specific store in Exchange Server 2003 and 2000.

1. Run Exchange System Manager (ESM).

2. Navigate and select required Mailbox Store in the appropriate server object.

3. Right-click on Mailbox Store and click Properties option. Properties dialog box appears.

4. Click Security tab option.

5. In Properties dialog box, click the user or group whose mailbox is to be accessed. If user is not present in the list click Add button. Enter the object name and click OK.

6. Select Full Control options under Allow column.

7. Click Apply and then click OK.

 

If Mailbox is on a Specific Server:

If you have the proper 'Exchange Server' administrative rights, you can follow the underlying procedure to access mailbox on a specific Server in Exchange 2003 and 2000.

1. Start Exchange System Manager.

2. Navigate to desired Administrative Group and then the Server under the servers node. Right-click on the selected server and choose Properties option.

3. Click Security tab.

4. In Properties dialog box, click the user or group whose mailbox is to be accessed. If user is not present in the list click Add button. Enter the object name and click OK.

5. Select Full Control under Allow column.

6. Click Apply and then click OK.

Wait for few minutes depending on number of domain controllers, Global Catalogs and site replication schedules and intervals for the changes to take place.