Setup: 3 sites in 3 countries using the same internal namespace (domain.local) different external (domain.com,co.uk,ae) so 3 different MX, OWA, etc. The three countries all want control over their own geographic serves w/o the other two countries local engineers able to modify. For instance EU dosen't want US engineers modifing HT policies on EUs HT servers. Can RBAC permissions be set at the server level? And if so, what type of problems might we run into? /r/R DL

Yes you can do it. There won't be any problem, its very simple u just don't want a user to access the server. Advantage of RBAC is that you can specify the restrictions on granular level. What is your concern? Gulab | MCTS-MCITP Messaging: 2010 | MCTS-MCITP Messaging: 2007 | MCC 2011 | Skype: Gulab.Mallah | Blog: www.iExchangeRanger.com

Hi, you can achieve it by using some setting in RBAC. There are a lot of article about this. http://www.mikepfeiffer.net/2010/06/rbac-database-scopes-in-exchange-server-2010-sp1-beta/ Management role scope A management role scope is the scope of influence or impact on a role assignment. When a role is assigned with a scope to a role group, the management scope targets specifically what objects that assignment is allowed to manage. The assignment, and its scope, are then given to the members of the role group, and restrict what those members can manage. A scope can consist of a list of servers or databases, organizational units (OUs), or filters on server, database or recipient objects. http://technet.microsoft.com/en-us/library/dd335146.aspxPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

The concern is the guys in the UK don't want the cowboys in the US touching their servers, and vice versa. Thanks for the answers guys!/R DL