For exchange 2003 there's an article in the knowledge base
http://support.microsoft.com/default.aspx?scid=kb;en-us;821897
In exchange 2007 everything is "a little" different and I can't figure out how to give one account unrestricted access to everything on the server.
I know it is possible to add mailbox permissions with (technet example)
Add-MailboxPermission MyServiceAccount -user Test2 -accessright fullaccess -inheritanceType all
but it does not accept an astrix (*) so this does not work
Add-MailboxPermission MyServiceAccount -user * -accessright fullaccess -inheritanceType all
still if it would work, it would not appy permissions to future users/new mailboxes.
I need something to give MyServiceAccount full access at a higher (store) level.