IBackup - online backup and online 

storage Support

Granting Mailbox Rights


Microsoft Exchange 2000, 2003 , 2007 and 2010 Server accounts with Enterprise Administrators mailbox access rights are denied by default. This restriction is also applicable if your login account is the Administrator account or you are a member of the Domain Admins or Enterprise Admins groups. In these cases also, access to all mailboxes other than your own will be denied, even if you have full administrative rights.

However, Exchange 2000/2003/2007/2010 administrative tasks can be performed without granting an administrator the rights to read anybody's mail.

These default restrictions can be removed with methods that are in agreement with your organization's security and privacy policies. They (the methods) are generally appropriate in a recovery server environment.


Granting rights to a specific mailbox

Listed below are the steps given to grant access to Exchange 2000/2003/2007/2010 Mailbox:


 


Download
Advanced Backup Plug-in*
Related Link


Backup MS Exchange Server Mailbox


Restore MS Exchange Server Mailbox
Interactive demo
User manual (PDF)
Product data sheet (PDF)
Business solutions

For Exchange 2007/2010 Mailbox:

Method 1:

Step 1:
Open the Exchange Management Console. Choose the Mailbox for which you want to grant permission. Right-click and select the 'Manage Full Access Permission' menu option.




Step 2:
In the 'Manage Full Access Permission' screen, grant full access to the Domain Admins user and click the 'Manage' button.




Step 3:
Click 'Finish' to complete the operation.




Method 2:

Open the Exchange 2007/2010 management shell and enter the following syntax:
Add-MailboxPermission - identity <mailbox name> - accessRights fullAccess - User "<Domain name>\Domain Admins"

Example: To grant full access to the Mailbox 'Adams'.
Add-MailboxPermission - identity Adams - accessRights fullAccess - User "MyWorld\Domain Admins"

Note: To perform Exchange 2007/2010 Brick-Level Backup, install the standalone version of MAPI from the Microsoft site. Download Standalone version of MAPI


For Exchange 2000 or Exchange 2003 Mailbox:

Note: You must have the appropriate Exchange administrative permissions to do so.

Step 1:
Start 'Active Directory Users and Computers'.

Step 2:
On the 'View' menu, ensure that the 'Advanced Features' check box is selected.

Note: This is not necessary on Exchange Server 2003 as the 'Exchange Advanced tab' is exposed by default.

Step 3:
Right-click on the user for whose mailbox you want to grant permission and choose 'Properties'.

Exchange Server Backup


Step 4:
On the 'Exchange Advanced' tab, click 'Mailbox Rights…'

Exchange Server Backup


Step 5:
Notice that the 'Domain Admins' and 'Enterprise Admins' have both been given 'Full Mailbox access'.

Step 6:
Click 'Add' and then click on the user/group for which you want to grant access to this mailbox and click 'OK'.

Step 7:
Ensure that the user/group is selected in the 'Name' box.

Step 8:
In the 'Permissions list', click 'Allow' next to 'Full mailbox access' and click 'OK'.

Exchange Server Backup


Step 9:
Click 'OK' to finish.



Granting rights to mailboxes located within a specific mailbox store

Listed below is the procedure to grant access to Exchange 2000 or Exchange 2003 mailboxes found on a specific mailbox store.

Note: You must have the appropriate Exchange administrative permissions to do so.

Step 1:
Start 'Exchange System Manager'.

Step 2:
Go to your server object within the appropriate Administrative Group. Expand the server object and locate the required mailbox store within the appropriate 'Storage Group'. Right-click and choose the 'Properties' option.

Exchange Server Backup


Step 3:
On the 'Properties' window click the 'Security' tab.

Step 4:
Click 'Add' and then click on the user/group for whom you want to grant access to the mailboxes and click 'OK'.

Step 5:
Ensure that the user/group is selected in the 'Name' box.

Step 6:
On the 'Permissions' list, click 'Allow' next to 'Full Control' and then click 'OK'.

Exchange Server Backup


Note: Ensure that no 'Deny' checkbox is selected next to the 'Send As' and 'Receive As permissions' options.

Step 7:
Click 'OK' to finish



Granting rights to the mailboxes located on a specific server

Listed below is the procedure to grant access to Exchange 2000 or Exchange 2003 mailboxes found on a specific server:

Note: You must have the appropriate Exchange administrative permissions to proceed.

Step 1:
Start Exchange System Manager.

Step 2:
Go to your server object within the appropriate 'Administrative Group'. Right-click and choose 'Properties'.

Exchange Server Backup


Step 3:
On the 'Properties' screen go to the 'Security' tab.

Step 4:
Click 'Add' and then click on the user/group for which you want to grant access to the mailboxes and click 'OK'.

Step 5:
Ensure that the user/group is selected in the 'Name' box.

Step 6:
On the 'Permissions' list, click 'Allow' next to 'Full Control' and then click 'OK'.

Note: Ensure that no 'Deny' checkbox is selected next to the 'Send As' and 'Receive As permissions' options.

Exchange Server Backup


Step 7:
Click 'OK' to finish.


* To perform MS Exchange Server and MS Exchange Brick-Level backups, download and install Advanced Backup Plug-in after installing the IBackup for Windows application.