Exchange 2007 - Move-Mailbox Restrictions.
We have a number of member of my team that are Exchange Recepient Administrators. Is there a way to restrict who can move mailboxes?We need them to be a Exchange recepient administrator, but we want remove their ability to move-mailboxes.Is there a way to do that?
March 8th, 2010 6:47pm

As per my understanding its not, But check whether exchange server administrtaor role is also given to them.Anil
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2010 8:00pm

They are only Exchange Recepient Administrators.There has to be a way to Deny them the ability to move a mailbox......I want them to be able to create mailboxes, just not move them.
March 8th, 2010 9:40pm

Are you sure they are only Exchange Recipient Admins?http://technet.microsoft.com/en-us/library/bb310792(EXCHG.80).aspxCheck out the response on move mailboxes
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2010 10:03pm

Correction - They are domain admins, and domain admins are local administrators on all exchange servers. In addition to that, they are Exchage recipient Administrators.Back top my original question - Is there a way to deny the ability to move a mailbox?
March 8th, 2010 10:12pm

HelloMy advice is to ask why the domain admins need to be domain admins on a daily basis. Everywhere I go i implement a security of delegation model. Domain admin accounts should be used only as and when changes to the domain are required. Everything else can be delegated through security group membership giving a much tighter security model.When the admin needs the Domain Admins rights then his Admin account is just elevated.Make Sense?
Free Windows Admin Tool Kit Click here and download it now
March 9th, 2010 10:48am

It is hard to remove move-mailbox permission for Exchange recipient administrator.Regards,Xiu
March 11th, 2010 11:08am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics