Group permissions possible to open another user's mailbox?

Discussion in 'Windows Small Business Server' started by Mike H, Jun 28, 2007.

  1. Mike H

    Mike H Guest

    I'm having trouble adding a mailbox to the profile for a group of
    Outlook 2003 users. We are in a SBS 2003 SP2 Premium domain and running
    Exchange Server 2003 SP2.

    I set up a new user account (say, "EstimatingProxy") today that is used
    by proxy by other users in the "Estimating" group. That user never logs
    on because it's a virtual user. I added the new virtual user to the
    "Estimating" group. The "Estimating" group is also a member of the
    "Users" group.

    I then added the group "Estimating" to the mailbox rights for the user
    "EstimatingProxy" and gave the group "Read permissions" and "Full
    mailbox access".

    Well, that doesn't seem to work. The error in Outlook is "Unable to
    expand the folder." It DOES work if I add each member of "Estimating" to
    "EstimatingProxy's" mailbox rights and give them the permissions I just
    mentioned.

    Am I not going to be able to assign these permissions by group name?

    In case you ask:

    * In my case, this would be the 7th mailbox in my Mail Profile (some
    limit?)
    * "EstimatingProxy" became the 12th user in the domain.
    * There are only 3 client computers in the domain.
    * Still using the original 5 CALs only
     
    Mike H, Jun 28, 2007
    #1
    1. Advertisements

  2. Is Estimating a mail-enabled security group, or a distribution group? You
    can't use the latter to set permissions....and you can only use the former
    if AD is in native mode (no pre-W2k DCs). You can change modes if you're in
    Mixed, and don't have any such legacy DCs.

    Also, it doesn't sound like the EstimatingProxy mailbox/account needs to be
    a member of the group Estimating.
     
    Lanwench [MVP - Exchange], Jun 28, 2007
    #2
    1. Advertisements

  3. Mike H

    Mike H Guest

    I think "Estimating" is NOT a mail-enabled security group, it is a
    security group in answer to security or distribution. I'm guessing,
    though. I created it by using the "Add a Security Group" wizard. I did
    nothing special during the makeup of the group except add 2 real users
    to the group and the fake user and add "Users" to the "Member Of"
    properties. I see that the group scope is "Universal" and group type is
    "Security".

    It exists in the MyBusiness/Security Groups AD container (is it right to
    say that?). Until you asked, I wasn't aware of the Exchange aspects of
    groups. Also, AD is in native mode.

    I see when I right-click on "Estimating" in AD Users and Computers that
    there are a number of Exchange-related items. I also see in the group's
    properties some Exchange-related permissions.

    Are we talking about things that need to be done in that menu?
     
    Mike H, Jun 29, 2007
    #3
  4. Open the properties, and if you see Exchange tabs, and e-mail addresses,
    it's mail-enabled.
    Remove the fake user. The user account itself already has the rights you
    want.
    That's fine.
    Yep....OU (organizational unit) is a container of sorts.
    No. If you right-click on the group in ADUC, and choose Exchange tasks, what
    options does it give you?
     
    Lanwench [MVP - Exchange], Jun 29, 2007
    #4
  5. Mike H

    Mike H Guest

    Old business first - I removed the fake user "EstimatingProxy" from the
    security group "Estimating".

    Okay, when I right-click on the security group "Estimating" I see, for
    "All Tasks", "Move", "Exchange Tasks", Add Exchange Query-based
    Distribution Groups...", "Add Exchange Public Folders...", "Send Mail",
    and "Find...".

    Specifically for "Exchange Tasks..." I'm presented with a wizard. The
    list of available tasks for that wizard are "Establish E-mail Address on
    Groups", "Hide Membership", and "Remove Exchange Attributes."

    hmm... I see where the group e-mail address sets up a distribution list.
    That's interesting. If that's where we're headed it's not quite exactly
    what I had in mind - I'd end up with multiple message copies (I think).
    Maybe that would be fine, though. It also implies a distribution group.

    Sorry, I was wool-gathering, there. That's what I see, in answer to your
    question :)
     
    Mike H, Jun 29, 2007
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.