1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Exchange Resource Mailboxes

Discussion in 'Exchange Exams' started by Jellyman_4eva, Jul 24, 2007.

  1. Jellyman_4eva

    Jellyman_4eva Byte Poster

    213
    4
    34
    Hi all,

    As some of you are aware I am working my way through Exchange 2k3 stuff at the moment and am trying to think at every stage about the "real life" scenario as well as the "exam" talk...

    Anyways here are a few questions which I have been unable to find answers for and I was wondering if someone with real life experience could help..

    I would like to create a resource mailbox (Basically a shared mailbox between a few people) I do not want to use a Public Folder for this. So I create a new user and create the mailbox, and then give the necessary people the Read and Full Mailbox access permissions. If I hide this new account from the GAL I cannot get access to it? (I believe I could hide it once the people have added it or use the legacy exchange dn value to get it though?)

    Also to help security I would like to disable the user account that is the resource mailbox owner (However once I do this again I cannot get access to it). I believe however that this rule may have changed since Exchange 2003 SP2 can someone confirm this?

    Did Exchange 2000 act like this as well (ie disabled user account means others cannot access their mailbox) or is this an Exchange 2003 "feature"?

    Also related to this I am seeing a few 9548 errors for disabled user accounts (The Exchange box is not fully patched yet its just a test box) is this also resolved in Exchange 2003 SP2?

    Sorry for the big post but it all seems interlinked!
     
    Certifications: MCDST, MCITP-EDST/EDA/EA/SA/ MCSA 2K3/2K8, MCSE+M 2K3/2K8, ISA/TMG, VCP3/4, CCNA, Exchange, SQL, Citrix, A+, N+, L+, Sec+, Ser+, JNCIA-SSL, JNCIS-SSL
    WIP: Lots
  2. Fergal1982

    Fergal1982 Petabyte Poster

    4,196
    171
    211
    as far as disabling the account is concerned, simply set the logon hours to prevent all access. You can do this in the same tab in AD where the account status checkboxes are (Can remember the name off-hand). Theres a logon hours button at the top. Click on it, make sure all the times are selected, and tick the box that disables logon for those hours.

    I dont believe you can grant access to accounts when the account is hidden in the GAl or disabled. We certainly couldnt at my old work.
     
    Certifications: ITIL Foundation; MCTS: Visual Studio Team Foundation Server 2010, Administration
    WIP: None at present
  3. Stoney

    Stoney Megabyte Poster

    731
    23
    69
    You can add a mailbox when it is hidden from the GAL, you just need to know the legacyDN from AD.
     
    Certifications: 25 + 50 metre front crawl
    WIP: MCSA - Exam 70-270
  4. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,191
    299
    319
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Exchange 2007\2010
  5. Jellyman_4eva

    Jellyman_4eva Byte Poster

    213
    4
    34
    Hi everyone thanks for the replies, especially Fergal's reply, that is literal thinking at its best and we shall make use of that one from now onwards.
     
    Certifications: MCDST, MCITP-EDST/EDA/EA/SA/ MCSA 2K3/2K8, MCSE+M 2K3/2K8, ISA/TMG, VCP3/4, CCNA, Exchange, SQL, Citrix, A+, N+, L+, Sec+, Ser+, JNCIA-SSL, JNCIS-SSL
    WIP: Lots
  6. Fergal1982

    Fergal1982 Petabyte Poster

    4,196
    171
    211
    Thats no problem. We used resource mailboxes a lot at my old work. Its a problem i've encountered myself before, which is why it came so easily to me.
     
    Certifications: ITIL Foundation; MCTS: Visual Studio Team Foundation Server 2010, Administration
    WIP: None at present

Share This Page

Loading...