question

Caspar-3353 avatar image
0 Votes"
Caspar-3353 asked KaelYao-MSFT commented

Exchange 2010 - 2016 coexistence How to manage mailboxes during transition

Hi, we currently have a client running both Exchange 2010 and Exchange 2016 in coexistence.

Does anyone have best practices for managing mailbox permissions during the transition phase? Right now you can technically manage mailbox rights using the old Exchange 2010 Management Console or use the ECP webpage that's in Exchange 2016.

Are there any up- or downsides to setting Full Access and Send As permissions using one or the other? Or will you only be able to set them in one place or the other depending on where the usermailbox is hosted? I would assume it's best to perform all changes on the new ECP once that server is active in the network.

office-exchange-server-administration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

KaelYao-MSFT avatar image
0 Votes"
KaelYao-MSFT answered KaelYao-MSFT commented

Hi, @Caspar-3353

I tested it in my lab ( same Exchange 2010 and 2016 coexistence environment)

When using Exchange 2010 Exchange Management Console to modify the permissions,
modifying permissions of mailboxes on Exchange 2010 server worked fine,
but when modifying mailboxes on Exchange 2016 server, it didn't work and showed the following error: Cannot set the security descriptor of mailbox.

78996-90.png


When using Exchange 2016 ECP (EAC), everything works fine.

Thus I suppose that you may need to modify the permissions via the Exchange 2016 ECP.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



90.png (99.5 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for testing that, I was unable to test that. It seems that if you run Exchange 2010 and Exchange 2016 in coexistence you will need to manage Full Access and Send As permissions by using the 2016 ECP. Creating new mailboxes on Exchange 2016 need to be created by using the 2016 ECP. Creating 2010 mailboxes need to be created the old way by using the Exchange 2010 Management Console. Exchange 2016 is aware of Exchange 2010, but Exchange 2010 is not fully aware of supports all functions talking back to Exchange 2016.

0 Votes 0 ·

Hi,@Caspar-3353

In addition,here is also a similar thread for your reference: Window AD groups and granting Full rights on a mailbox on 2016


0 Votes 0 ·

Hi,@Caspar-3353

I am writing here to confirm with you how thing going now?
Do you have any questions or need further help on this issue?

0 Votes 0 ·