Assigning permissions over Ex 2010 mailboxes

Almost at every Exchange 2010 project there are headaches with properly assigning permissions over the mailboxes. I noticed that Ex 2010 store “does not see” Receive As on MDB if it’s assigned as part of Generic All permissions set. Since then I always assign them via 2 separate command-lets – not one liner like documentation suggests – and it works perfectly. All mailboxes now inherit Receive As from MDB.

Get-MailboxDatabase | Add-ADPermission -User TARGET\QMM-SRV -AccessRights GenericAll

Get-MailboxDatabase | Add-ADPermission -User TARGET\QMM-SRV -ExtendedRights Receive-As

 

DON’T DO

Get-MailboxDatabase | Add-ADPermission -User TARGET\SVC_QMM -AccessRights GenericAll -ExtendedRights Receive-As

Now most important is to validate:

get-mailboxdatabase DATABASENAME | get-adpermission | where {$_.user -like “*qmm*”} | ft identity,user,accessrights,extendedrights,*inherit* 

This PowerShell command-let should report BOTH GenericAll AND Receive As for each MDB on the separate lines for Ex 2010 store to honor it and inherit down to each mailbox.

b2ap3_thumbnail_7-16-2013-3-57-06-PM_20130716-203228_1