
THEN it will show up in the Exchange Management Console!
What do you do with it now?
Well, not much.... yet.
This is a disabled account. We need to add user access to it, and this brings us into the dreaded world of Permissions.
First, create a security group (via Active Directory Users and Computers) in your domain called "Marketing Department Security Group" and add the users you want to access the calendar. And in our friend the Management Shell, grant that group full mailbox permissions:
[PS] c:\Add-MailboxPermission DeptCal -User:'Marketing Department Security Group' -AccessRights:FullAccess
We're not done yet. You will need to add "Send-As" permissions to the group as well. Those of you doing migrations are really used to this.
[PS] c:\Add-ADPermission "Marketing Department Calendar" -User:'Marketing Department Security Group' -ExtendedRights:Send-As -AccessRights:ReadProperty, WriteProperty -Properties:'Personal Information'
Users in the Group now have full rights to that shared calendar.
So in OWA just pass the DeptCal email address and use your own credentials to log in (please do not send me posts about my Certificate Error, it's a test server for gosh sakes).

SO in Meeting Maker if you have had a group calendar, map and migrate it into a USER calendar and then CHANGE it post-migration to a shared calendar using the "Type" command.
e.g.,
[PS] c:\Set-Mailbox DeptCal -Type:Shared
and set up your Security Groups.
Why not just create a Shared mailbox in Exchange and migrate into that? The account is Disabled -- we won't be able to re-create data in it with full fidelity. Create it as a User and then change it to Shared and you'll be happier with the results.
3 comments:
Thank you very much, also very helpful for setting up shared calendars from scratch. :-)
Keep it up, mate
This is great infoand I appreciate you sharing it! When I tried it the users in the security group can not access the calendar or see it in the global address list. However everyone out side of that group can see it in the address book but can't access it. Any thoughts where i went wrong?
Look at the effective permissions … perhaps something about that group does not inherit permission changes (e.g. those in an IT group are in “protected” OUs or Groups). To check: go into AD sites & services, find your server under services, and do a properties. Add one of those accounts, then check the effective permissions (sometimes under advanced). See if there are any denys.
Post a Comment