Delegation Wizard
Is there a document on performing detailed delegation wrt Exchange 2007? Lets take a basic example, I have 2 sets of recipient administrators Set 1 Must be able to administer only Exchange/Mail related attributes and Users A B and C in OU XXX Set 2 Must be able to administer Excahange/Mailb related attributes and Users D and E in OU YYY Set 2 must also be able to change the users description In Exchange 2000/2003 this can be done, can it be done with Exchange 2007 and the New GUI?
August 12th, 2006 1:33pm

You can control permissions to this level of granularity by using the "permission" cmdlets (Get/Set-ADPermission in this case). The GUI delegation is only for the built-in delegated roles, which cover the most common delegation requirements. Evan
Free Windows Admin Tool Kit Click here and download it now
August 13th, 2006 1:19am

Yep. Also,2003 did not have a built-in recipient role (only View-Only, AG Admin, Full Admin), so the only way this was possible was by doing custom permissioning using direct AD ACL'ing. Take a look at the up-to-date online help for the description of the improvements in 2007: http://www.microsoft.com/technet/prodtechnol/exchange/E2k7Help/cb24ddb7-0659-4d9d-9057-52843f861ba8.mspx?mfr=true As Evan said, if you need to go beyond the built-in roles, you can use the same custom permissioning techniques used in 2003 as essentially everything is still ACL based in 2007.
August 13th, 2006 2:42am

Agreed, I am going to need to spend a whole bunch more time learning how to do this, (I actually prefer the CLI). I just have many questions when it comes to upgrading where detailed roles have already been defined, let me read the documentation and play around before I comment if the 2007 delegation is better
Free Windows Admin Tool Kit Click here and download it now
August 13th, 2006 9:11am

Is there a document that explains where to get started wrt exchange 2007 custom delegation, I want to take a normal user and assign rights to that user that gives him progressive rights to exchange 2007 eg, can I create a role that only allows someone to create and delete mailboxes only? etc etc..
October 14th, 2007 12:02pm

I now have the answer, a new feature in exchange 2010.... looks like 2007 did not have this functionalityhttp://msexchangeteam.com/archive/2009/11/16/453222.aspx
Free Windows Admin Tool Kit Click here and download it now
January 12th, 2010 3:47pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics