Granting access to specific powershell and exchange management shell commands to a user or security group

This is probably a simple thing to do.

I have a user that I want to have rights to use the new-aduser powershell command, and the enable-mailbox command in Exchange Management Shell.  I don't necessarily want to make this user a member of Domain Admins or Account Operators just yet, however.  Is there a way I can grant rights to certain specific commands to a user or a particular security group?

May 15th, 2015 11:32am

This is probably a simple thing to do.

I have a user that I want to have rights to use the new-aduser powershell command, and the enable-mailbox command in Exchange Management Shell.  I don't necessarily want to make this user a member of Domain Admins or Account Operators just yet, however.  Is there a way I can grant rights to certain specific commands to a user or a particular security group?

This can be done by using Delegation+RSAT.

Firstly provide appropriate permissions using 'Delegation Wizard' to the user who needs access to create user objects. The install RSAT with PowerShell tools on her computer.

Free Windows Admin Tool Kit Click here and download it now
May 16th, 2015 3:44am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics