Mailbox delegate access

Team,
I have a shared mailbox and I want to provide Read only access to other users on the shared mailbox inbox folder so that they can only Read mails and cannot delete the mails in side inbox folder. How can I achieve by doing from Power shell
command and what is the procedure.

Hi,
You can use the following cmdlet to grant users reviewer permission to the shared mailbox's Inbox folder.
Add-MailboxFolderPermission -Identity shared:\Inbox -user xxx -AccessRights Reviewer
What's more, here is an article for your reference.
Add-MailboxFolderPermission
http://technet.microsoft.com/en-us/library/dd298062(v=exchg.150).aspx
Hope this can be helpful to you.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Similar Messages

Can you add delegate access to a user's calendar or mailbox folder via powershell?

Basically I want to know if you can grant a user delegate access to another user's calendar or meeting room using native powershell commands?
I know you can do this via method 1, listed below, however when you grant permissions in this way and if a user wants to see who has delegate access to their calendar or inbox by going to delegate access in outlook they will not see user's who have access
to their calendar or inbox.
Method 1:
Add-MailboxFolderPermission -Identity "userA:\Calendar" -User UserB -AccessRights editor
The above is a nice and simple way of granting userB EDITOR access to UserA's calendar.
But as stated above as you are using mailboxFolderPermissions and not DelegateAccess, this applies directly to this folder and if userA goes to their delegate access view in Outlook, they will not see that userB has access to their calendar.
I know that you can use the below commands to see a list of user's who have delegate access to you calendar:
Get-Mailbox userA | Get-CalendarProcessing | select resourcedelegates
I am new to powershell and don't know if there is a way of setting delegate access to a user's calendar or inbox/folder via powershell commands, similar to the above.
Any help with this query would be much appreciated!
thanks

Delegate access is simply a combination of folder rights (which you've described) and Send As right, which is conferred by Add-MailboxPermission or Send On Behalf of right, which I'm not sure if you can confer with PowerShell. Set-CalendarProesssing applies
to resource mailboxes like conference rooms, not to user mailboxes.
Update: "Send on Behalf of" is conferred this way:
Set-Mailbox UserMailbox -GrantSendOnBehalfTo UserWhoSends
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Error:[The specified object was not found in the store] when trying to read another mail box using Delegate access

Hi all,
I need to create service to access all unread mails of other mailbox's every time in Exchange server 2013, for that i trying to use Delegate access.
but i am not succeed. I am getting Error Every time : [The specified object was not found in the store]
error shows in FolderId in
var folderId = new FolderId(WellKnownFolderName.Inbox, userMailbox);
List<DelegateUser> newDelegates = new List<DelegateUser>();
DelegateUser emailDelegate = new DelegateUser("[email protected]");
emailDelegate.Permissions.InboxFolderPermissionLevel = DelegateFolderPermissionLevel.Editor;
newDelegates.Add(emailDelegate);
Mailbox mailbox = new Mailbox("[email protected]");
Collection<DelegateUserResponse> response = service.AddDelegates(mailbox, MeetingRequestsDeliveryScope.DelegatesAndSendInformationToMe, newDelegates); var userMailbox = new Mailbox(useremail);
var folderId = new FolderId(WellKnownFolderName.Inbox, userMailbox);
var itemView = new ItemView(20);
var userItems = service.FindItems(folderId, itemView);
i changed my code in many ways by adding new Delegate User with different folder permissions.
but i am getting same Error, Please help me.

That error means you don't have rights to the Mailbox your trying to access. In Exchange by default the only user that has access to mailbox is the owner of the Mailbox, Exchange Administration rights does not grant you access to another users mailbox. You
need to either specifically grant rights to each mailbox using Add-MailboxPermissions or use EWS impersonation where you can impersonate the owner of the Mailbox see
http://msdn.microsoft.com/en-us/library/bb204095(EXCHG.140).aspx and
http://msdn.microsoft.com/en-us/library/office/dd633680(v=exchg.80).aspx
Cheers
Glen

Outlook 2010 Delegate Access Not enable

In outlook 2010, when i only have the single account, the delegate Access Function is fine.
When i add more thank one account, the delegate access is gray out.
are there have any solution?

Hi Daney,
I have tested on my lab (Exchange 2010 + Outlook 2010), result as below:
User: Mavis01, Mavis02, Mavis03.
Permission: Mavis01 has Full Access permission for Mavis02's mailbox.
Action:
1. Create a profile for Mavis01's mailbox, then add Full Access permission for Mavis02's mailbox.
2. Restart Outlook, I can see Mavis02's mailbox shows up under Mavis01.
3. Then I add Mavis03 account into this profile, restart Outlook.
4. Mavis01, Mavis02, Mavis03 are all listed in Outlook, and nothing gray.
"Delegate Access" gray out seems that it is a permission issue, however the delegate function works well if doesn't add account into one profile.
I suggest run Outlook under safe mode or re-create profile for testing.
Thanks
Mavis Huang
TechNet Community Support

Prohibit delegate access in Outlook

Hello,
as mentioned, I want to prohibit users to be able to delegate access of their mailboxes to other users.
My question is, is there a registry key, or is it possible to prohibit this via GPO? Earlier, I read about a file called "dlgsetp.ecf" and "dlgsetp.dll" which, when renaming the .ecf file, will hide the tab for Delegation. If my account
was verified, I could provide a Picture, but unfortunately it isn't and I don't know how to do that..
However, this seems more like a hack and not a viable solution. I already figured out, that you can deny sharing of mailboxes, calendars or other objects by Setting a reg key, so that these options are greyed-out for the users. The next step would be to
prohibit the last possibility, as mentioned, to delegate the Access of objects for example: mailbox, calendar, .. Since this is still available.
Thanks in advance! Best regards
Tomi

Hi,
You cannot stop an owner to assign his permission to others.
I think it’s better to train the user to have a good behavior when using delegation feature in Outlook.
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

Lync delegate access without Enterprise Voice enabled

I need the delegate access functionality but due to our current configuration we do not (yet) have enterprise voice setup or enabled. We have assistants that are scheduling meetings on behalf of others and need the conferencing functionality. I
have only been able to get this work when the enterprise voice is enabled for the delegate, does any one know of a workaround that I can use and not have to enable enterprise voice??
Thanks in advance!

Hi,
Agree with Matt. The feature is not available without enabling Enterprise Voice.
Regards,
Kelly

Delegate access to users to create and edit mail contacts in exchange server 2013

Hi,
Can I delegate access to users to create/edit/delete contacts in Exchange 2013, if yes, how?

Hi,
From your description, you want to grant users the permission to manage mail contacts. If I have misunderstood your concern, please let me know.
Based on my knowledge, you need to add these users to Organization Management Role group and Recipient Management Role group.
For more information, here is a thread for your reference, please see the "Recipient Provisioning Permissions" section.
Recipients Permissions
http://technet.microsoft.com/en-us/library/dd638132(v=exchg.150).aspx
Hope it helps.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Delegate access for Bitlocker recovery on an OU only?

Can someone give me the steps to delegate access to an AD group for Bitlocker recovery passwords on an OU only?
I have read the articles that have the vb script and talk about using ldp.exe,
http://technet.microsoft.com/en-us/library/cc771778(v=ws.10).aspx#BKMK_TestingRecovery
http://blogs.technet.com/b/craigf/archive/2011/01/26/delegating-access-in-ad-to-bitlocker-recovery-information.aspx
but I don't know how to do this specifically on an OU, and I need the steps to connect, bind, etc with ldp.exe as I never use this tool.
I tried the following but it doesn't work (bummer, because it's nice and simple)
http://blog.nextxpert.com/2011/01/11/how-to-delegate-access-to-bitlocker-recovery-information-in-active-directory/
Please give me instructions step-by-step to give a group bitlocker recovery password info on the tab in ADUC for a specific OU only (AD 2008 R2) - thanks!

Hi Sara,
I searched for delegating Bitlocker permission and found the same article as you provided.
In the first article you mentioned, it provided steps to delegate permission to a user group:
Appendix A: Delegating Permission
http://technet.microsoft.com/en-us/library/cc771778(WS.10).aspx#BKMK_AppendixA
The steps are:
1. Create a new user group.
2. Add members to the group (for example, add Helpdesk staff members).
3. Assign control access and read property permissions to the group.
And in your second article, the author replied about applying delegation to an OU in commons:
There are only 2 reasons to create an OU:
1) Apply different GPOs
2) Apply different delegation.
And all we're doing here is delegating. So in LDP, instead of opening the ACL of the domain (as we're doing in the example above), you'd open the ACL on the relevant OUs and add different groups per OU. And the "control access flag" isn't a special function
of the domain object, you can apply it to OUs also.
Delegating access in AD to BitLocker recovery information
http://blogs.technet.com/b/craigf/archive/2011/01/26/delegating-access-in-ad-to-bitlocker-recovery-information.aspx
If you have any feedback on our support, please send to [email protected]

Mail keeps crashing because: "Mailbox cannot access your mailbox information because it's already in use."

I have the new MacBook Pro with Retina Display, and my Apple Mail has always worked just fine. About a week ago, I recieve a message saying "Mail cannot access your mailbox information because it’s already in use." The dialogue box gave me the options of "Rebuilding Mailbox Information" or quitting the application. Rebuilding does absolutely nothing, and every time I try to open Mail I get the same response and have to quit. I haven't added any apps or anything that would affect my mail; what's going on? Thanks!

Try this first.
Isolating Issues
Isolating an issue by using another user account
Isolating issues in Mac OS X
Safe Mode
Safe Mode - About

HT5567 Iphones and Ipads with IOS 6.0.x and later getting Calendar invitation even so that Delegate access is enable on exchange 2010 and outlook 2010

I'm Running Exchange 2010 with outlook 2010 in my environment, since Apple OS went from 5.x to 6.x I been having issues where the Iphones and Ipads running OS version 6.x or higher do not acknowledge that the exchange user has a calendar delegate and are automatically accepting the invitations, not allowing the Delegate to acknowledge first, If this test is run on any Apple devices running OS Version 5.x but less than 6.x the issue is not there.. any one that may have encounter with this situation got a fix or a possible resolution on it.. Thanks

Ok, well after looking at everything, I decided that the best solution was to uninstall an App called "Tango", as it seemed to 'mess' with contacts directly, and I only use it with 1 person, so switching back to Skype (plus Tango sends/shares lots of personal
info, location, and keeps changing it's access rights and doing stuff when you're not looking - I'm sure some people love it, but for me, it's a belts and braces get rid of anything that might have 'contributed' to this issue).
Found my un-sync'd contacts and emailed them to myself, then deleted the Exchange active-sync account. Checked what was left, found google had managed to sync some stuff, cleared that up too!
RE-created the account on the S4 - only need the email and password, as it finds the server and sets itself up automatically (I guess it did that previously).
All is now working, after about 5mins the data had been re-populated and it sync's new changes instantly. But I will monitor from time to time to check that new contacts or added numbers etc do sync. My best guess is that some index or other data became corrupt.
Just one of those things (or had I been tango'd?!).
On the Truncating Notes Issue, the S4 (realised that it's running Android 4.3) does chop a note but only if edited, at 1001 chrs. However unlike others, it seems to only truncate the note if you actually edit the note field, so adding a phone number or removing
one, leaves the note field intact!
To summaries other devices behaviour with the Contact record Notes Field:
- iPhone 3GS (on iOS 6.1.3) truncates at 32,777 chrs (so pretty big notes!)
- Samsung Galaxy Note 10.1 (GT-N8020 - Android 4.1.1) chops at about 1,000chrs, even if just adding a phone number to the contact - so not even editing the notes field
- HTC One X (4.2.2) at 5,122 chrs (when editing any part of the contact)
I hope this might help someone in the future if they have similar problems ...
cheers

Exchange 2010 resource mailbox delegate still getting attachments

I have a user that is set as a delegate on a resource mailbox, when an attachment is added to a meeting request the resource mailbox is deleting the attachment. However, the delegate of said resource mailbox is still receiving the attachment but my
user does not want the delegate to receive the attachment. Here are the resource settings:
AutomateProcessing : AutoAccept
AllowConflicts : False
BookingWindowInDays : 180
MaximumDurationInMinutes : 1440
AllowRecurringMeetings : True
EnforceSchedulingHorizon : True
ScheduleOnlyDuringWorkHours : False
ConflictPercentageAllowed : 0
MaximumConflictInstances : 0
ForwardRequestsToDelegates : True
DeleteAttachments : True
DeleteComments : True
RemovePrivateProperty : True
DeleteSubject : True
DisableReminders : True
AddOrganizerToSubject : True
DeleteNonCalendarItems : True
TentativePendingApproval : True
EnableResponseDetails : True
OrganizerInfo : True
ResourceDelegates : {}
RequestOutOfPolicy :
AllRequestOutOfPolicy : False
BookInPolicy :
AllBookInPolicy : True
RequestInPolicy :
AllRequestInPolicy : False
AddAdditionalResponse : False
AdditionalResponse : <DIV><FONT size=2 face=Tahoma></FONT></DI
V>
RemoveOldMeetingMessages : True
AddNewRequestsTentatively : True
ProcessExternalMeetingMessages : True
DefaultReminderTime : 15
RemoveForwardedMeetingNotifications : False
Is it possible to have the attachment deleted from this email that the delegate receives?

Hi,
I would like to clarify the following thing:
Setting Delete Attachments means that the attachment information in a meeting request does not appear in the resource's calendar. But it would appear in the meeting email original content of Inbox.
I'm afraid there is no direct way to delete the attachments of meeting requests before they go into delegate's inbox. But there is a workaround, you can new rule on Outlook to delete all attachments that are sent to delegate. (Note: If you new this rule,
all attachments that are sent to the delegate will be deleted, not only meeting requests.)
Hope my clarification is helpful.
If there are any problems, please feel free to let me know.
Best regards,
Amy
Amy Wang
TechNet Community Support

Send calendar invites "on behalf" of WITHOUT mailbox access

I am using Outlook 2010 (on Exchange with Windows XP) but do NOT have access to my boss's inbox - only to her calendar, which is why my question is in the Outlook section and not Exchange. We have added me as a delegate with the highest level
of permission: Editor. I am aware that this can be done via Share Calendar or Calendar Permissions and I did it via the latter.
When I create meetings in my boss's calendar, it sends them from me, showing me as the Organizer and her as an attendee. I have searched the MS Office Community forum extensively and keep seeing that this is because I do NOT have delegate
permissions for her mailbox/Exchange account. Yet a coworker said she was able to send an invite on behalf of her boss WITHOUT having access to his inbox.
Is this possible? Thanks in advance!

Hi,
Have you double-checked if the delegate permission was granted successfully under File > Account Settings > Delegate Access?
We can also try deleting the boss's calendar in your Outlook and then open it again to see if it helps.
In addition, do you or your boss syncs emails on a mobile device? I heard that syncing emails on a mobile device may cause such issue, if this is the case, we may try to disable the synchronization on the device and then test the
issue again.
Please let me know the result.
Regards,
Steve Fan
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Exchange 2010 mailbox not able to access auto-mapped Exchange 2013 CU3 mailbox

Hi,
We are in co-existence with Exchange 2010 SP3 and Exchange 2013 CU3.
Outlook Anywhere and Autodiscover pointed towards Exchange 2013 CAS servers. Everything works fine irrespective where is mailbox is located Exchange 2010 or 2013.
When I tried to access auto-mapped mailbox from Exchange 2010 as primary mailbox accessing auto-mapped Exchange 2013 mailbox "Cannot expand the folder. The set of folders cannot be opened. Microsoft Exchange is not available. Either there are network
problems or the Exchange server is down for maintenance".
Exchange 2013 OutlookAnywhere "Externalclientauthenticationmethod" is Basic and "Internalclientauthencitcationmethod" is NTLM. Everything is setup as per the Tech-net recommendations.
Checked both these articles but still it is not working:
http://support.microsoft.com/kb/2839517
http://support.microsoft.com/kb/2834139
Please let me know if there are any other ideas.
Raman

Hi,
I recommend you refer to the following articles to troubleshoot the issue:
Troubleshooting Mailbox Auto-Mapping : Autodiscover
Details about the shared mailbox that is to be accessed will be returned to the Outlook client by the autodiscover process. This is really handy to know if you are ever in the position where you need to troubleshoot why the auto-mapping feature isn’t working
correctly
Troubleshooting Mailbox Auto-Mapping : Permissions
When you use either the Exchange Management Console or the Exchange Management Shell to grant a user with full access permission against another mailbox, permissions changes are made to allow this as you might expect. Certain Active Directory attributes
are also updated to reflect both the Active Directory account of the mailbox being accessed as well as the Active Directory account of the accessing mailbox. Specifically, you can check the contents of the msExchDelegateListLink and msExchDelegateListBL Active
Directory attributes to see these details and it is worth checking these if you have any suspicions that things aren’t working correctly.
Hope this helps!
Thanks.
Niko Cheng
TechNet Community Support

Delegate calendar access?

How can i delegate access to my iCloud calendar to my administrative assistant who works on a pc platform and is not on iCloud herself?

I have exactly the same requirement. Any help is greatly appreciated.

Cannot display the folder. Microsoft Outlook cannot access the specified folder location.

Hi, guys
I cannot view delegate mailbox in Outlook. Following is my configure.
I have two mailbox A-User and B-User
Login Outlook as A-User, click File -> Account Settings -> Delegate Access, add B-User and give Editor permission of Inbox.
Right click A-User's root inbox and select Properties -> Permission, select B-User and check "Folder visible".
Login Outlook as B-User on other computer, click File -> Account Settings -> Account Settings, select B-User and click Change -> More Settings -> Advanced, add A-User.
Now I can see a root A-User in Navigation Pane. But when I click it, it shows
"Cannot display the folder. Microsoft Outlook cannot access the specified folder location."
or
"Cannot display the folder. Microsoft Outlook cannot access the specified folder location. The operation failed. An object cannot be found".
I searched some solutions from internet, but all of them don't work. Could you give some suggestions?
Thanks.

Hi,
First, please double check if you have given the right permission to B-User on your step 2.
In addition, we can try to give a higher permission to the B-user to check the result.
Please feel free to post back and let me know the result.
Best Regards,
Steve Fan
TechNet Community Support

Mailbox delegate access

Similar Messages

Maybe you are looking for