Exchange 2010 SP1 Mailbox Folder Permission

 

Sometimes in Microsoft Exchange environment we need to add user permission to other user mailbox.

We can add Full Access permission to mailbox like below:

Add-MailboxPermissions -Identity Mailbox1 -User JSmith -AccessRights FullAccess -InheritanceType all

 

But what if we don’t want to add permissions to all folders in mailbox but only to a one mailbox folder.

With Microsoft Exchange 2010 SP1 we can add permission to specified folder for user or Security Group, (Add-MailboxFolderPermission) we can remove (Remove-MailboxFolderPermission) and also we can change this permissions (Set-MailboxFolderPermission).

To add Reviewer permissions to User1 on Inbox folder of mailbox “John Smith” we can use:

Add-MailboxFolderPermission -identity j.smith@domain.com:\Inbox -User User1 -AccessRights ReadItems

 

Now we can check permissions to John Smith Inbox folder like below:

Get-MailboxFolderPermission -Identity j.smith@domain.com:\Inbox

 

We can change permissions for User1 to mailbox Inbox folder using Set-MailboxFolderPermission from Reviewer to FolderVisible:

Set-MailboxFolderPermission -Identity j.smith@domain.com:\Inbox -User User1 -AccessRights FolderVisible

Continue reading

Remove specific messages from Exchange 2010 Server

 

Sometimes Exchange administrator need to remove messages that fit specific criteria from large number of mailboxes or from Exchange transport queues.

Removing messages from Exchange mailboxes:

To perform remove message operation from mailboxes, in Exchange 2010 RBAC Mailbox Export Import role must be assigned to the admin account. To remove messages from Exchange 2010 mailboxes we will use Search-Mailbox cmdlet.

Account used to export data from mailboxes must be:

  • an Exchange Server Administrator
  • member of local Administrators group of target server
  • Full Access permission assigned to the mailboxes

 

To add RBAC role to user Admin:

New-ManagementRoleAssignment –Role “Mailbox Import Export” –User “Admin”

 

Sometimes you will need to add necessary permissions for user Admin to all mailboxes, then we can use:

Get-Mailbox -ResultSize unlimited | Add-MailboxPermissions -User Admin -AccessRights FullAccess -InheritanceType all

After completed removing operations, we have to remove this permissions like below:

Get-Mailbox -ResultSize unlimited |Remove-MailboxPermissions -User Admin -AccessRights FullAccess -InheritanceType all

 

To search all messages with specified subject like “Important Message” of all mailboxes on server MBX1 we have to use example like below:

Get-Mailbox -Server  "MBX1" -ResultSize Unlimited | Search-Mailbox -SearchQuery 'Subject:"*Important Message*" -targetmailbox "*SearchMailbox*" -targetfolder "*SearchFolder*" -logonly -loglevel full

Continue reading

Exchange 2010 quota warning messages issue

 

In Microsoft Exchange 2010 environments, Exchange sends a quota message to mailbox owners when mailbox size exceeds:

  • IssueWarningQuota – the lowest storage quota
  • ProhibitSendQuota – the middle storage quota
  • ProhibitSendReceiveQuota – the highest storage quota

 

All Quotas limits can be configured at mailbox or database level.

We can define time when messages are sent by specifying QuotaNotificationSchedule for Mailbox Database.

 

If we want to check QuotaNotificationSchedule use:

Get-MailboxDatabase | select name, QuotaNotificationSchedule

Continue reading