Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Basically, when we installed Exchange 2010 alongside our Exchange 2003 server (we assume), this is what caused our problem. The Exchange 2010 server is not active, just running on the domain.

What's actually going on is that user groups like Enterprise Admins are getting a single deny flag on Full Control over mailboxes currently residing on the Exchange 2003 server which is preventing any of us from making changes.

It says these permissions are inherited from the Parent Object, but we have no idea which one that is.

Any idea on how to go about fixing this?

share|improve this question
up vote 2 down vote accepted

This should actually be the default for Exchange 2003. By design, you don't necessarily want your admins being able to read everyone else's email.

The "best practice" if you need the access is to assign a different account (who is not an Enterprise or Domain Admin) with full control permissions if you need them (see this link).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.