Mailbox inherited permissions are being removed from Archives after migrating mailboxes to Exchange 2013 CU2 or higher.
New mailboxes created on Exchange 2013 CU2 or higher or existing mailboxes migrated to Exchange 2013 CU2 or higher no longer have inherited permissions associated to their Archives.
Enterprise Vault will attempt to utilize the users 'msExchMailboxSecurityDescriptor' AD value. Prior to Exchange 2013 CU2, the 'msExchMailboxSecurityDescriptor' value could be updated, to include Inherited permissions. Since Exchange 2013 CU2, the 'msExchangeMailboxSecurityDescriptor' can only be updated to include delegate permissions.
When only one SID is present in the property.
As of Enterprise Vault 12, enabling Inherited Permissions in the Enterprise Vault Exchange Mailbox policy settings will synchronize permissions contained within the msExchMailboxSecurityDescriptor only.
The following link contains information about Enterprise Vault 12
Was this content helpful?
Rating submitted. Please provide additional feedback (optional):