The Exchange synchronizer will need a user with full access on the synchronizer users’ mailboxes. In Microsoft Exchange 2007 this is handled different as in previous Exchange versions.

There is also a difference between Microsoft Exchange 2007 and Microsoft Exchange 2007 SP1.

In Microsoft Exchange 2007 the only way to do this is by the Exchange Management Shell. In Microsoft Exchange 2007 SP1 granting full mailbox access can also been done in the Exchange Management Console.

Full Access permissions are not granted until the  Microsoft Exchange Information Store service caches the permissions and updates the cache. To grant the permissions immediately, stop and then restart the Microsoft Exchange Information Store service.

Note that the account you use must be delegated the following:

• Exchange Organization Administrator role 

Exchange Management Shell

In the Exchange Management Shell you need to enter the following command line:

Add-MailboxPermission “Mailbox” –User “Trusted User” –AccessRights FullAccess

Example:

Add-MailboxPermission “M. Schrievers” –User “SyncUser” –AccessRights FullAccess

Exchange Management Console

1. Start the Exchange Management Console.
2. In the console tree, click Recipient Configuration.
3. In the result pane, select the mailbox for which you want to grant the Full Access permission.
4. In the action pane, under the mailbox name, click Manage Full Access Permission. The Manage Full Access Permission wizard opens.
5. On the Manage Full Access Permission page, click Add.
6. In Select User or Group, select the user to which you want to grant the Full Access permission, and then click OK.
7. Click Manage.
8. On the Completion page, the Summary states whether the Full Access permission was successfully granted. The summary also displays the Exchange Management Shell command that was used to grant the Full Access permission.
9. Click Finish.