What Does Shared mailbox Mean?
This page mentions older exam versions. See the Current Exam Context and Legacy Exam Context sections below for the updated mapping.
On This Page
Quick Definition
A shared mailbox is like a team email address that several people can access. Instead of each person having their own login to the mailbox, they are given permission to view and send messages from it. It does not require its own user license in most cases, which saves money. People typically use it for department emails like support@ or info@.
Commonly Confused With
A distribution group is a collection of recipients that receives emails forwarded to all members. A shared mailbox stores messages in one central inbox. With a distribution group, each person gets their own copy of the email, and replies only go to the sender, not back to the group. With a shared mailbox, everyone sees the same conversation.
A company uses support@domain.com as a distribution group. When a customer emails, all five support staff get a separate copy. Agent A replies but the customer only sees Agent A's email. Later, Agent B replies, and the customer sees two separate conversations. With a shared mailbox, all replies are in one thread and the customer always sees support@domain.com.
A user mailbox is tied to a specific person with their own login and credentials. A shared mailbox does not have its own login and is accessed by multiple people. User mailboxes require a full license, while shared mailboxes in Microsoft 365 up to 50 GB do not.
Employee Jane has a user mailbox jane@company.com. Only she can log in and see her inbox. The HR department has a shared mailbox hr@company.com that all HR staff can access without a separate login.
Public folder mailboxes are designed for hierarchical content sharing, often used for shared calendars, contacts, or discussion threads. They are not simple team inboxes. Shared mailboxes are designed for email collaboration and can also host calendars and contacts, but they are flat rather than hierarchical.
A company uses a public folder for a team calendar that everyone can view. They use a shared mailbox for the team's incoming customer support emails because it needs email sending ability and a single inbox view.
A mail-enabled security group is a security group that also has an email address. It works like a distribution group for email but also controls permissions to resources. It does not have a shared inbox, only forwards messages to members.
An IT team uses a mail-enabled security group itteam@company.com to send notifications to all IT staff. The group does not store emails; it only forwards them. A shared mailbox for the same purpose would store all incoming email in one central location.
Must Know for Exams
Shared mailboxes are a recurring topic in Microsoft 365 and Exchange-related certification exams, such as MS-700 (Managing Microsoft Teams), MS-203 (Microsoft 365 Messaging), and MS-101 (Microsoft 365 Mobility and Security). They also appear in general IT support exams like CompTIA Network+ and ITIL foundation courses when discussing collaboration and shared resources. In the MS-203 exam, shared mailboxes are a core objective under Manage mailboxes and configure Exchange Online. You will be tested on creation methods, permission types (Full Access vs. Send As vs. Send on Behalf), storage limits, licensing requirements, and converting a user mailbox to a shared mailbox.
Exam questions often present scenarios where a help desk needs to set up a shared mailbox for a sales team. You must decide whether to grant Full Access or Send As permissions, or when to use Send on Behalf. You might need to know that a shared mailbox cannot have a password and that it must be accessed through delegation. Another common question is about storage limits: a shared mailbox under 50 GB in Microsoft 365 does not require a license, but if it exceeds that, you need to either license it or archive older items.
In the MS-700 exam, shared mailboxes appear in the context of collaboration, where Teams channels can be integrated with shared mailboxes for email integration. You might be asked how to allow a shared mailbox to appear as a Teams channel email address. In MS-101, shared mailbox migration and retention policies are relevant. You need to know that litigation hold on a shared mailbox requires an Exchange Online Plan 2 or archiving license. Understanding these details directly translates to multiple choice questions, case studies, and drag-and-drop tasks in the exams.
Simple Meaning
Think of a shared mailbox like a physical team bulletin board in an office kitchen. Everyone on the team can pin notes to it, read what others have posted, and take down messages. But the bulletin board itself does not belong to any one person, it belongs to the group. In the same way, a shared mailbox is an email inbox that does not belong to an individual user. Instead, it is a common inbox that multiple people can access.
For example, your apartment building might have a common email address like manager@building.com. Any property manager on duty can log in and read messages from tenants. They can also reply, but the reply comes from manager@building.com, not from their personal email. This keeps all building communications in one central place.
In the email world, a shared mailbox works the same way. It has its own email address and its own folder structure. Authorized users can send emails as the mailbox, reply to messages, and manage calendar items if the mailbox is also a shared calendar. Behind the scenes, the system stores the mailbox as a special object in the directory, and access is controlled by permissions rather than by a separate username and password login for the mailbox itself. People access it by adding it to their own Outlook or webmail profile. This makes it very efficient for teams that need a common inbox without buying a full license for each user account.
Full Technical Definition
A shared mailbox is a specialized mailbox object in Microsoft Exchange Online, Microsoft 365, or on-premises Exchange Server that is designed for use by multiple delegated users. Unlike a regular user mailbox which is tied to an Active Directory or Azure AD user account with its own authentication credentials, a shared mailbox exists as a mail-enabled object in the directory without a dedicated user license. It does have a hidden user account in the backend, but that account is disabled and does not require a full Exchange Online license when the mailbox is smaller than 50 GB. In Microsoft 365, shared mailboxes can be accessed by up to 25 users simultaneously and support up to 50 GB of storage without a license, or unlimited storage with an appropriate license.
Technical implementation involves setting up the shared mailbox in the Exchange admin center or via PowerShell cmdlets such as New-Mailbox -Shared. Once created, the mailbox gets its own Active Directory object with a disabled user account. Permissions are then assigned using Set-Mailbox -GrantSendOnBehalfTo or Add-MailboxPermission to grant Full Access and Send As rights. From a protocol standpoint, users connect to the shared mailbox using MAPI over HTTP in Outlook or via Exchange Web Services in Outlook on the web. The mailbox does not have its own logon credentials; instead, the user authenticates with their own credentials and their client then requests access to the additional mailbox using the AutoDiscover service.
The backend directory stores the shared mailbox as a recipient object with a RecipientTypeDetails value of SharedMailbox. It supports all standard mailbox features including folders, rules, calendar, contacts, and task lists. However, certain features like archiving, litigation hold, and retention policies require an appropriate license. In Exchange hybrid environments, shared mailboxes can be migrated between on-premises and cloud, but the permissions and mail flow must be carefully managed. The Transport service handles mail routing exactly as it does for any other mailbox, with the addition of delegate permissions to allow multiple users to send as the mailbox. Security considerations include auditing of mailbox access, careful delegation to prevent unauthorized use, and ensuring that mailbox forwarding or auto-reply rules are managed to avoid mail loops.
Real-Life Example
Imagine a small library with a single shared desk phone. The number is printed on the front door: 555-1234. Any librarian on duty can answer that phone, take messages, and return calls. The phone does not belong to any single librarian, it belongs to the library. When a patron calls, any librarian can pick up and say, Hello, this is the library. Nobody expects to reach a specific person, they expect to reach the library team.
Now translate that to the digital world. A shared mailbox is that phone number for email. The email address support@library.org is the shared desk phone. Any librarian who has permission can log into their own email client and see all messages sent to that address. They can reply, and the reply comes from support@library.org, not from their personal email. Just like the desk phone, the mailbox is always there, always staffed by whoever is on duty.
There is no separate login for the shared mailbox itself. The librarian logs in with their own credentials, and the system fetches the shared inbox alongside their personal inbox. This is like giving each librarian a key to the desk drawer that holds the phone log and messages, but the phone number itself remains the team's. This analogy helps explain why shared mailboxes are so useful for customer support, help desks, or department inquiries where the identity is the team name, not a person.
Why This Term Matters
In IT environments, shared mailboxes matter because they solve a common business problem, how to handle email addresses that belong to a role or department rather than a person. Departments like sales, support, or info always need a central inbox. Without shared mailboxes, companies would either have to create a full user account for each of those addresses, paying for licenses and managing passwords, or they would have to forward all emails to one person, creating a single point of failure.
Shared mailboxes are cost-effective because, in many licensing models, they do not require a separate user license as long as they stay under the storage limit. For example, in Microsoft 365, shared mailboxes under 50 GB can be accessed by licensed users without purchasing an additional license for the mailbox itself. This can save an organization thousands of dollars per year if they have multiple departmental inboxes.
From a management perspective, shared mailboxes are easy to control. When an employee leaves, the shared mailbox remains active and accessible to the rest of the team. Access is managed through permissions in the admin center, not by sharing passwords. This supports security best practices like the principle of least privilege and auditable access. IT professionals need to know how to set up, delegate, and troubleshoot these mailboxes because they are a standard part of any collaboration workload in Exchange and Microsoft 365. Misconfigurations, such as granting Send As instead of Send on Behalf, or failing to set a forwarding address for auto-replies, can cause communication gaps and compliance issues.
How It Appears in Exam Questions
Exam questions about shared mailboxes typically fall into three categories: scenario-based configuration, permission management, and troubleshooting. In a scenario-based question, you might read about a company that needs a shared inbox for the HR department, accessible by five HR staff members. The question would ask which steps you take to create the mailbox and assign the correct permissions. The answer would involve using the Exchange admin center or PowerShell to create a shared mailbox, then granting Full Access permission to each user, and possibly Send As permission if replies must come from the shared address directly.
Permission management questions often focus on the difference between Send As, Send on Behalf, and Full Access. A tricky question might say a user can see the shared mailbox but cannot send emails as that address. The correct answer is that they have Full Access but not Send As permission. Another common pattern is: Which permission allows a delegate to send email that appears to come from the shared mailbox itself? The answer is Send As. Which permission shows From: sharedmailbox on behalf of User? That is Send on Behalf.
Troubleshooting questions might involve a user who cannot see the shared mailbox in Outlook. The cause could be that the mailbox was not added to the user's profile, or the AutoDiscover process failed. Or a user complains that replies from the shared mailbox are not being delivered. The issue might be that the shared mailbox has no SMTP address configured, or that a mail flow rule is blocking the domain. Some questions test knowledge of licensing: A shared mailbox exceeds 50 GB, what do you do? Options include upgrading to Exchange Online Plan 2, applying an archiving license, or converting to a user mailbox. These question patterns require you to know not just the definition, but the practical administration steps and limitations.
Practise Shared mailbox Questions
Test your understanding with exam-style practice questions.
Example Scenario
A small real estate agency has five agents who all need to handle inquiries from the company's main email address, contact@homerealty.com. Currently, all emails to that address are being forwarded to one agent's personal mailbox. This is causing problems because when that agent is on leave, inquiries are missed. The office manager asks you to create a shared mailbox so all agents can see the same inbox.
You log into the Exchange admin center and create a new shared mailbox with the display name Home Realty Contact and the email address contact@homerealty.com. You then grant Full Access permission to each of the five agents. You also grant Send As permission so that when they reply, the email appears to come from contact@homerealty.com rather than their personal address. Each agent then opens Outlook, goes to File, Account Settings, and adds the shared mailbox to their profile. They can now see the shared inbox alongside their own personal inbox.
When a potential buyer sends an email to contact@homerealty.com, all five agents can see it. If one agent replies, the reply comes from the shared address, and the buyer never sees an individual agent's email. The team sets up a rule within the shared mailbox to automatically categorize emails by property type. They also enable an automatic reply that says Thank you for contacting Home Realty. We will respond within 24 hours. This scenario demonstrates the main benefits: shared access, consistent identity, and centralized management without needing five separate logins or forwarding rules.
Common Mistakes
Giving each user the password to the shared mailbox account instead of using permissions
Shared mailboxes have a disabled user account with no password. Trying to log in directly is impossible. This also violates security best practices because passwords would have to be shared, which prevents auditing individual actions.
Always grant Full Access and Send As permissions through the admin center or PowerShell. Users then add the mailbox to their own Outlook profile automatically via AutoDiscover.
Confusing Send As with Send on Behalf permissions
Send As makes the email appear to come directly from the shared mailbox, while Send on Behalf shows From: sharedmailbox on behalf of User. Using the wrong permission can cause confusion for recipients about who sent the email.
If replies should appear to come from the team address without revealing the individual, use Send As. If the sender's identity should be visible, use Send on Behalf.
Assuming a shared mailbox is the same as a distribution group or public folder
A distribution group only forwards messages to members; it does not have a central inbox. A shared mailbox stores messages in a single inbox that all delegates can see. Using a distribution group means everyone gets a separate copy, which leads to fragmented conversations.
Use shared mailboxes when you need a single, shared central inbox. Use distribution groups for one-way announcements or broadcast messages to multiple individuals.
Creating a shared mailbox without setting proper auto-mapping properties
By default, shared mailboxes auto-map to users with Full Access permission. If this property is disabled or if users are in different forests, the mailbox does not automatically appear in Outlook, causing support tickets about missing mailboxes.
Verify the AutoMapping attribute on the user mailbox or force add the shared mailbox manually using the Add-MailboxPermission cmdlet with -AutoMapping $true.
Not archiving the shared mailbox when it approaches 50 GB storage limit
A shared mailbox over 50 GB without a license will stop accepting new emails. Without planning, this can cause loss of incoming customer inquiries and compliance risks.
Monitor mailbox size regularly. Enable archiving or apply an Exchange Online Plan 2 license to increase the limit or enable online archive for older items.
Exam Trap — Don't Get Fooled
{"trap":"The question presents a scenario where a user is given Full Access permission to a shared mailbox and can see the inbox but cannot send emails. The trap answer choices include Grant Send on Behalf or Remove and re-add the user. The correct answer is Grant Send As permission."
,"why_learners_choose_it":"Learners confuse Full Access with send permissions. They think Full Access means full control including sending, but Full Access only allows reading and managing items, not sending as the mailbox.","how_to_avoid_it":"Remember that Full Access is read/manage only.
For sending, you must separately assign Send As or Send on Behalf. Always check both permission types in the admin interface."
Step-by-Step Breakdown
Determine the need
First, confirm that a shared mailbox is the right solution. If multiple people need to read and respond to emails sent to a single address, and you do not need each person to have a separate inbox for that address, a shared mailbox is appropriate. Consider alternatives like distribution groups if people only need to receive emails.
Create the shared mailbox in the admin center
In Exchange admin center, go to Recipients, then Shared mailboxes. Click Add a shared mailbox. Provide a display name (e.g., Support Team) and email address (e.g., support@domain.com). The system creates a hidden user account and mail-enables it. Alternatively, use PowerShell: New-Mailbox -Shared -Name 'Support' -DisplayName 'Support Team' -PrimarySmtpAddress support@domain.com
Grant access permissions to users
Add users by granting Full Access permission so they can read and manage items in the mailbox. Use the admin interface or PowerShell: Add-MailboxPermission -Identity support@domain.com -User jane@domain.com -AccessRights FullAccess. This automatically auto-maps the mailbox to the user in Outlook.
Assign send permissions
Decide whether users should send emails as the mailbox (Send As) or on behalf of the mailbox (Send on Behalf). Send As makes the email appear from the shared address directly. Use Set-Mailbox -GrantSendOnBehalfTo for Send on Behalf, or Add-RecipientPermission for Send As. In Microsoft 365, Send As requires Add-RecipientPermission cmdlet.
Verify and configure additional settings
Check that the mailbox is working by having a delegate log into Outlook or Outlook on the web and confirm the shared mailbox appears. Set any necessary email forwarding, automatic replies, retention policies, or litigation hold. Also, configure mailbox size limits and archiving if needed. Monitor the mailbox storage to ensure it stays under 50 GB if unlicensed.
Practical Mini-Lesson
To truly understand shared mailboxes in practice, you need to know how they are created, managed, and troubleshot in a real IT environment. Start by understanding the underlying directory objects. In Exchange Online, every shared mailbox has a corresponding user object in Azure Active Directory, but that user object is disabled and cannot be signed into interactively. This is why you cannot log in as the shared mailbox directly. The mailbox receives emails through standard SMTP routing, and delegates access it through MAPI or EWS protocols.
When you grant Full Access permission, you are essentially adding the mailbox to the user's profile via AutoDiscover. The user does not need to know the mailbox's password, which enhances security. However, there is a common issue where the mailbox does not auto-map. This can happen if the user already has an existing permission that blocks mapping, or if the mailbox is in a different forest. The fix is to manually add the mailbox in Outlook using File, Account Settings, and then Add Shared Mailbox. Alternatively, you can run Set-Mailbox -Identity sharedmailbox@domain.com -AutoMappingEnabled $false and then later enable it.
Another critical point is the 50 GB storage limit for unlicensed shared mailboxes. If the mailbox reaches this limit, incoming messages will be rejected. You must either delete old items, enable an online archive (which requires an Exchange Online Plan 2 or archiving license), or assign a full user license to the mailbox. Archiving moves older items to a separate archive mailbox that is still accessible to delegates.
Professionals also need to understand that shared mailboxes support the full set of mailbox features: calendar sharing, contact lists, tasks, mailbox rules, and email forwarding. However, litigation hold and In-Place Hold require licensing. Also, be aware that shared mailboxes can be converted to user mailboxes and vice versa, which is a common exam scenario. For example, if an employee leaves, you can convert their user mailbox to a shared mailbox to preserve their data without paying for the license.
Common troubleshooting scenarios include mail flow issues where emails to the shared mailbox bounce. Check if the mailbox is over quota, if the domain is correct, or if there is a mail flow rule blocking delivery. Another issue is that delegates cannot see sent items from the shared mailbox. By default, sent items from a delegate are saved in the delegate's own Sent Items folder, not in the shared mailbox. To change this, you need to enable the Send As behavior or configure mailbox delegation settings in the Exchange admin center. Understanding these nuances separates a beginner from a certified professional.
Memory Tip
Think SHARED: Send Help And Respond using Email Delegate. Shared mailboxes are for teams, not individuals, and they require separate permissions for reading (Full Access) and sending (Send As or Send on Behalf).
Covered in These Exams
Current Exam Context
Current exam versions that test this topic — use these objectives when studying.
MS-102MS-102 →Legacy Exam Context
Older materials may mention these exam versions, but learners should use the current objectives for their target exam.
MS-101MS-102(current version)Related Glossary Terms
Two-factor authentication (2FA) is a security method that requires two different types of proof before granting access to an account or system.
AAA (Authentication, Authorization, and Accounting) is a security framework that controls who can access a network, what they are allowed to do, and tracks what they did.
An A record is a type of DNS resource record that maps a domain name to an IPv4 address.
An AAAA record is a DNS record that maps a domain name to an IPv6 address, allowing devices to find each other over the internet using the newer IP addressing system.
802.1X is a network access control standard that authenticates devices before they are allowed to connect to a wired or wireless network.
Frequently Asked Questions
Do I need a separate license for a shared mailbox in Microsoft 365?
No, shared mailboxes up to 50 GB do not require a separate license if at least one user with a license accesses it. If the mailbox exceeds 50 GB, you need to assign an Exchange Online Plan 2 license or an archiving license.
Can I log into a shared mailbox directly with a password?
No, shared mailboxes have a disabled user account and no password. They must be accessed by delegated users through their own authenticated session.
What is the difference between Full Access and Send As permission?
Full Access allows a user to read and manage items in the mailbox. Send As allows them to send emails that appear to come from the shared mailbox address. To send emails you need both.
Can a shared mailbox have a calendar?
Yes, shared mailboxes include a calendar by default, which can be used for team appointments, like a shared schedule for a conference room or a department calendar.
How many users can access a shared mailbox at the same time?
In Microsoft 365, a shared mailbox supports up to 25 simultaneous connections from delegates. This includes all protocols like Outlook, OWA, and mobile.
What happens when I convert a user mailbox to a shared mailbox?
Converting a user mailbox to a shared mailbox disables the user account, removes the license requirement, and allows multiple delegates to access the mailbox. It is often done when an employee leaves the company.
Summary
A shared mailbox is a team-oriented email inbox that multiple people can access without needing their own separate login or full user license. It is widely used in businesses for departmental addresses like support@, info@, or sales@. The mailbox is created in the Exchange admin center or via PowerShell and is accessed through delegation. IT professionals must understand the permissions model, particularly the difference between Full Access and Send As, as well as storage limits and licensing quirks.
Shared mailboxes are a frequent topic in Microsoft 365 and Exchange certification exams, where questions focus on configuration, permission management, and troubleshooting. Common mistakes include confusing shared mailboxes with distribution groups, mishandling permissions, and neglecting storage limits. By mastering the step-by-step setup process and the technical underpinnings, you will be prepared to handle both exam questions and real-world administration tasks.
The key takeaway for exam success is to remember that shared mailboxes are not user accounts. They do not have passwords, they require separate send permissions, and they are cost-effective because they often do not need a license. Practice creating one in a test environment to solidify your understanding.