7,925 questions
Use folder-level permissions instead of Full Access. Add-MailboxFolderPermission is the cmdlet, or you can do it manually via Outlook/OWA if you prefer.
Permissions on shared mailboxes
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(22.400000000000002, 71%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Sebastian Musto
1
Reputation point
Good morning, I wanted to see if a shared mailbox could be configured as read-only, that is, no user can delete emails or a little more advanced that some users can delete and others cannot. Thanks
Exchange | Exchange Server | Management
1 answer
Sort by: Most helpful
-
Vasil Michev 119.8K Reputation points MVP Volunteer Moderator2021-07-26T16:10:13.577+00:00 -
Sebastian Musto 1 Reputation point
2021-07-26T16:35:15.143+00:00 Thanks for the reply. And the permission so that they cannot delete emails as it would be?
Its neccesary configure the permission for each user?
Its neccesary configure the permission for each folder?
-
Vasil Michev 119.8K Reputation points MVP Volunteer Moderator
2021-07-26T18:01:45.83+00:00 You can configure them per user, group or "default". And yes, it needs to be set on each individual folder as necessary. Refer to the cmdlet help for more info: https://learn.microsoft.com/en-us/powershell/module/exchange/add-mailboxpermission?view=exchange-ps
-
JeffYang-MSFT 6,261 Reputation points Moderator2021-07-27T06:00:55.053+00:00 Agree with michev's suggestion. You can configure the Reviewer permission of each folder for Default users like below:
Add-MailboxFolderPermission -Identity ******@contoso.com:\Inbox -User Default -AccessRights Reviewer
-
Sebastian Musto 1 Reputation point
2021-07-27T15:31:12.027+00:00 Thanks to both of you for the reply.
I just tried it but it wouldn't work. I want to clarify that it is a shared mailbox, not a mailbox.
-
Vasil Michev 119.8K Reputation points MVP Volunteer Moderator
2021-07-27T17:45:14.47+00:00 What exactly doesnt work? The cmdlet supports shared mailboxes just fine.
-
Sebastian Musto 1 Reputation point
2021-07-27T17:54:45.187+00:00 I do it manually via Outlook/OWA
but the member of the shared mailbox still can delete mails
-
Vasil Michev 119.8K Reputation points MVP Volunteer Moderator
2021-07-27T20:28:47.293+00:00 Check what other permissions they might have, including Full access permissions or individual folder-level entries (the Default entry only applies to users not listed otherwise).
-
JeffYang-MSFT 6,261 Reputation points Moderator
2021-07-29T02:07:01.613+00:00 Hi @Sebastian Musto ,
It has been a while, how is everything going? Have you ever check if there is any other permissions they might have addition to the Reviewer permission you granted?
I tried test in my Outlook and it could work fine like below, prompt for permission when trying to delete the messages in shared folder:
-
Sebastian Musto 1 Reputation point
2021-07-29T03:19:44.993+00:00 Hi, I check that there were no other permissions besides the default for several members but they can still delete emails
Could it have something to do that we sync our AD and Exchange with AD Connect against Office365?
-
JeffYang-MSFT 6,261 Reputation points Moderator
2021-07-30T10:02:58.87+00:00 Hi @Sebastian Musto ,
As I know, that should not be related to your issue.
May I know what specific Exchange version are you using? And would you mind creating a fresh new shared mailbox and do the operations we mentioned above for test so that we could exclude possible factors as much as possible? -
JeffYang-MSFT 6,261 Reputation points Moderator
2021-08-04T08:36:15.417+00:00 Hi @Sebastian Musto ,
It has been a while, how is everything going?
If you have any update about this issue, please feel free to post back.
Sign in to comment -