Al
Tue Aug 23 20:07:05 CDT 2005
It would be interesting to see what it ended up putting on the ACL. I say
that because it should have put the object you found in the GAL into the ACL
which, as it turns out is a disabled user object (right?) That would
prevent this from working as you expect it would and would be considered a
limitation of the deployment.
This will continue until you migrate the NT4 accounts to AD user objects.
A workaround would be for the administrator to do this and use the NT
account to grant the permission. Unfortunately, that's going to be
temporary and a LOT of work for the admin. Would be less work (most likely)
if you migrated the users instead.
Al
"Dan" <Dan@discussions.microsoft.com> wrote in message
news:BE1499F0-C8BA-48E2-B6E6-3DA241239117@microsoft.com...
> Yes the same account as the workstation logon has mailbox rights. This is
> the
> NT Logon.
>
> To grant delegate rights we ran Tools|options in Outlook and then select
> delegates and then add. You are presented with the Global Address list
> from
> which to choose a user from. I presume this Global address list comes
> from
> AD since the mailbox and mail server being connected to is associated with
> AD??
>
> Trust is a 2 way external trust, i don't think there are any problems with
> this.
>
> "Al Mulnick" wrote:
>
>> Should have completed the thought. When you specify the logon, which
>> account has the mailbox rights? The same account as the workstation
>> logon?
>>
>> When you granted the rights as a delegate, what exact steps and objects
>> did
>> you use?
>>
>> Al
>>
>> "Al Mulnick" <amulnick_No_SPAM@ncDOTrr.com> wrote in message
>> news:eoohRE%23pFHA.2336@tk2msftngp13.phx.gbl...
>> > Sounds like the way that you have set the permissions. How are the
>> > trusts
>> > set up?
>> >
>> >
>> > "Dan" <Dan@discussions.microsoft.com> wrote in message
>> > news:76C6C018-14CC-4ED7-9C96-C522E1293630@microsoft.com...
>> >>I have a query in regards to migrating Exchange 5.5 to Exchange 2003
>> >>
>> >> I have 2 Domains NT4 and 2003 AD with a two way trust between them.
>> >> The
>> >> accounts were migrated using AD Migration Tool. I then set up the
>> >> Active
>> >> Directory Connector and synced these accounts up with their related
>> >> Mailboxes
>> >> in the Exchagne 5.5 Directory and installed Exchange 2003 into the
>> >> same
>> >> Exchange Organisation.
>> >>
>> >> I can now move mailboxes between 5.5 and 2003 with no problem. The
>> >> problem
>> >> I have is that we are wanting to migrate the whole Exchange subsystem
>> >> before
>> >> migrating the Workstations. This means that users will log onto NT4
>> >> at
>> >> the
>> >> workstation level and then connect to an Exchange 2003 mailbox through
>> >> Outlook. This works fine however when a user trys to access another
>> >> users
>> >> Exchange 2003 mailbox they get permission denied even though full
>> >> rights
>> >> have
>> >> been given.
>> >>
>> >> If the same user logs onto the Ad Environment and opens their mailbox
>> >> they
>> >> get access to others mailboxes no problem.
>> >>
>> >> Does anyone have any ideas on how to get around this or had this issue
>> >> before?
>> >>
>> >> Thanks in advance
>> >
>> >
>>
>>
>>