Hi All, Was wondering if any of you have heard of or know how to further restrict administration roles. For example say you wanted the Recipient administrator to be able to create new accounts but not to modify full access permissions. Is this possible? Cheers, Merlin

In exchange 2007, Recipient administrator would have required permission and can not be alter, This is very well manage in exchange 2010 where you can modify your own permission model usingt feature RBAC. Hope this info will help you !!! Anil

Yes, Anil is right. In Exchange 2007, you need to modify and manage access control lists (ACLs) to meet your needs. But in Exchange 2010 you can create new Role to including the cmdlet New-Mailbox (create new accounts ), and excluding the cmdlet Add-MailboxPermission (modify full access permissions). More information about RBAC: Understanding Role Based Access Control http://technet.microsoft.com/en-us/library/dd298183.aspx Frank Wang

Is there a document that outlines modifying the ACL's for Exchange 2007 to get a little more granular in the control of administrative permissions? Cheers, Merlin

http://technet.microsoft.com/en-us/library/aa996881(EXCHG.80).aspx Split Permissions Model