|
|
|
date: Tue, 22 Apr 2008 09:41:34 -0700 (PDT),
group: microsoft.public.exchange.development
back
Permissions on the Exchange Server
Hi,
I have a VBA script which adds a delegate to the calendar folder and
creates mail and calendar folders (Glen Scales, helped me with it,
last year - thanks). The script works for my account or on accounts
where users have added me as a delegate with editor permissions, but i
see access denied errors when i try to update anyone elses email
folder.
I am not an exchange server adminstrator, i have been provided with a
test server where i can test and execute my scripts, i think my
account has exchange admin permissions. I can create new email
accounts, change passwords from the AD. Can someone tell me what
permissions one requires on the exchange server so that my script can
update all the accounts i want want to update.
If i use the Exchange Explorer tool (provided in the Exchange 2003
SDK) i have the same issue, i can see see my folders and public
folders, but i cannot see the details. i see the following error
message. "Http://servername.net/exchange/username/ is invalid. Verify
that the url is correct." I was assuming that an admin can access any
account. What permission do i need to execute my script?
Appreciate any suggestions to move forward.
thanks
a23rd
date: Tue, 22 Apr 2008 09:41:34 -0700 (PDT)
author: a23rd
Re: Permissions on the Exchange Server
To change the rights of someone else calendar you will need to be granted
access to that mailbox. If you have to change say the rights of every
calendar on a server you would need to have an account that is granted
rights to all mailboxes. For this its better to create an account specific
for this purpose instead of using an Administrator account which are
explicitly denied access to any mailbox other then their own. There is a
walk though of how to assign this type of super user right on
http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
Cheers
Glen
"a23rd" wrote in message
news:a0ef3041-e7a8-45d3-9247-c09801324f8d@u69g2000hse.googlegroups.com...
> Hi,
> I have a VBA script which adds a delegate to the calendar folder and
> creates mail and calendar folders (Glen Scales, helped me with it,
> last year - thanks). The script works for my account or on accounts
> where users have added me as a delegate with editor permissions, but i
> see access denied errors when i try to update anyone elses email
> folder.
> I am not an exchange server adminstrator, i have been provided with a
> test server where i can test and execute my scripts, i think my
> account has exchange admin permissions. I can create new email
> accounts, change passwords from the AD. Can someone tell me what
> permissions one requires on the exchange server so that my script can
> update all the accounts i want want to update.
>
> If i use the Exchange Explorer tool (provided in the Exchange 2003
> SDK) i have the same issue, i can see see my folders and public
> folders, but i cannot see the details. i see the following error
> message. "Http://servername.net/exchange/username/ is invalid. Verify
> that the url is correct." I was assuming that an admin can access any
> account. What permission do i need to execute my script?
> Appreciate any suggestions to move forward.
>
> thanks
> a23rd
date: Wed, 23 Apr 2008 08:41:20 +1000
author: Glen Scales [MVP]
Re: Permissions on the Exchange Server
thanke yuo Mr Glen for yuor value information :
i had some issue how does i can do such job programmtically by VB.NET
i mean how can run ADD_ADPermission command by VB.net code in case of such
code runig at same Exchange server machine??
i did one program to read some mail box and make notifaction for some mail
but i have to run ADD_ADPermission manually for each user from Exchange
Managemnet Shell i using exchange 2007
"Glen Scales [MVP]" wrote:
> To change the rights of someone else calendar you will need to be granted
> access to that mailbox. If you have to change say the rights of every
> calendar on a server you would need to have an account that is granted
> rights to all mailboxes. For this its better to create an account specific
> for this purpose instead of using an Administrator account which are
> explicitly denied access to any mailbox other then their own. There is a
> walk though of how to assign this type of super user right on
> http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
>
>
> Cheers
> Glen
>
> "a23rd" wrote in message
> news:a0ef3041-e7a8-45d3-9247-c09801324f8d@u69g2000hse.googlegroups.com...
> > Hi,
> > I have a VBA script which adds a delegate to the calendar folder and
> > creates mail and calendar folders (Glen Scales, helped me with it,
> > last year - thanks). The script works for my account or on accounts
> > where users have added me as a delegate with editor permissions, but i
> > see access denied errors when i try to update anyone elses email
> > folder.
> > I am not an exchange server adminstrator, i have been provided with a
> > test server where i can test and execute my scripts, i think my
> > account has exchange admin permissions. I can create new email
> > accounts, change passwords from the AD. Can someone tell me what
> > permissions one requires on the exchange server so that my script can
> > update all the accounts i want want to update.
> >
> > If i use the Exchange Explorer tool (provided in the Exchange 2003
> > SDK) i have the same issue, i can see see my folders and public
> > folders, but i cannot see the details. i see the following error
> > message. "Http://servername.net/exchange/username/ is invalid. Verify
> > that the url is correct." I was assuming that an admin can access any
> > account. What permission do i need to execute my script?
> > Appreciate any suggestions to move forward.
> >
> > thanks
> > a23rd
>
>
>
date: Sun, 4 May 2008 10:44:02 -0700
author: Abdulfatah A. Reslan
Re: Permissions on the Exchange Server
in .NET you should be able to set AD permissions using
System.DirectoryServices.ActiveDirectorySecurity namespace. To set mailbox
permission in 2007 you need to use the add-mailboxpermission there is no
other supported method.
Cheers
Glen
"Abdulfatah A. Reslan" wrote
in message news:C82021DC-56C6-4B76-90E7-F0158247463B@microsoft.com...
>
> thanke yuo Mr Glen for yuor value information :
> i had some issue how does i can do such job programmtically by VB.NET
>
> i mean how can run ADD_ADPermission command by VB.net code in case of such
> code runig at same Exchange server machine??
>
>
> i did one program to read some mail box and make notifaction for some mail
> but i have to run ADD_ADPermission manually for each user from Exchange
> Managemnet Shell i using exchange 2007
> "Glen Scales [MVP]" wrote:
>
>> To change the rights of someone else calendar you will need to be granted
>> access to that mailbox. If you have to change say the rights of every
>> calendar on a server you would need to have an account that is granted
>> rights to all mailboxes. For this its better to create an account
>> specific
>> for this purpose instead of using an Administrator account which are
>> explicitly denied access to any mailbox other then their own. There is a
>> walk though of how to assign this type of super user right on
>> http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm
>>
>>
>> Cheers
>> Glen
>>
>> "a23rd" wrote in message
>> news:a0ef3041-e7a8-45d3-9247-c09801324f8d@u69g2000hse.googlegroups.com...
>> > Hi,
>> > I have a VBA script which adds a delegate to the calendar folder and
>> > creates mail and calendar folders (Glen Scales, helped me with it,
>> > last year - thanks). The script works for my account or on accounts
>> > where users have added me as a delegate with editor permissions, but i
>> > see access denied errors when i try to update anyone elses email
>> > folder.
>> > I am not an exchange server adminstrator, i have been provided with a
>> > test server where i can test and execute my scripts, i think my
>> > account has exchange admin permissions. I can create new email
>> > accounts, change passwords from the AD. Can someone tell me what
>> > permissions one requires on the exchange server so that my script can
>> > update all the accounts i want want to update.
>> >
>> > If i use the Exchange Explorer tool (provided in the Exchange 2003
>> > SDK) i have the same issue, i can see see my folders and public
>> > folders, but i cannot see the details. i see the following error
>> > message. "Http://servername.net/exchange/username/ is invalid. Verify
>> > that the url is correct." I was assuming that an admin can access any
>> > account. What permission do i need to execute my script?
>> > Appreciate any suggestions to move forward.
>> >
>> > thanks
>> > a23rd
>>
>>
>>
date: Tue, 6 May 2008 19:37:13 +1000
author: Glen Scales [MVP]
|
|
