Hi there, What is the prefered way to set permissions, like send-as & full mailbox access, on a server level in Exchange 2007? I saw that the server objects in the configuration partition contain these rights. Raw editing tools like adsi-edit are however not our prefered tools... Any ideas? Cheers!

Both RIM and Symantec use the adsi-edit method to assign 'send-as' + 'information storeread/write'permissions to server objects in the configuration partition for their Blackberry and Enterprise Vault products.... Still feels a bit strange setting permissions by using raw tools like adsi-edit or the add-adpermission cmdlet. Does no one elsehave an idea????

The set permission on server object you need to set permission on an AD object, useGet/Add/Remove--ADPermission cmdlet /Lasse

Ok another confirmation that raw editing tools are the way to go.Let's summarize: To set exchange related permissions (like store permissions) and send-as on a server level you need to alter the ACL's on ms-Exch-Exchange-Server objects using adsi-edit, add-adpermission or any other editing toolin CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=<orgname>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<domain>,DC=<root> Thanks for the confirmation Lasse