Exchange 2007 Delegation for Symantec Enterprise Vault

Symantec Enterprise vault is an awesome tool for mail archiving and Journaling. I really impressed with its administrations console for configuration and data management.

In my work environment we have deployed Enterprise vault 7.0, 8.0, 8.0 SP3 with Microsoft exchange ver 2003 and 2007. All these deployments are different in its features and exchange compatibility. One of the basic requirements to have successful deployment is to set proper mail server delegation for vault service account.


In Exchange 2000,2003 it was easy to delegate the mailbox admin controls thru. In exchange 2007 it was a challenge to apply the necessary delegation thru power shell and i spent some decent time to find the script working and posting the script to benefit the vault administrators. In prior to that you should delegate server admin privileges for the specific mailbox server then execute below script at mail store level

Script which I used


"Add-ADPermission -identity "mail store name" -user "Vault Service account" -AccessRights GenericAll"

Standard Syntax from microsoft

"Add-ADPermission -Identity  -User  

[-AccessRights ]

 [-ChildObjectTypes ] 

[-Confirm []] [-Deny ]

 [-DomainController ] [-ExtendedRights ]

 [-InheritanceType ] 

[-InheritedObjectType ] [-Properties ] 

[-WhatIf []]"

Hope this helps.