Is there a way to give permission to manage users from certain domain only ? We want to configure an exchange server and manage external domains only. We want to give permissions to "user1" from "firtsdomain.com" to manage users from firstdomain.com only , create and give permissions to "user2" to manage seconddomain.com only , etc ... manage involve create users , and configure mailboxes , etc , basic administration. Is this possible or is just me dreaming ??TeKi

The boundaries for administration are usually OU level, the email address is just part of them. However it sounds like you are doing a hosted Exchange deployment. That makes things very different, because a hosted deployment requires heavy configuration of the server otherwise everyone can see everyone else in the GAL for example. You also have to licence Exchange in a different way. Simon.Simon Butler, Exchange MVP. http://blog.sembee.co.uk , http://exbpa.com/

we think on this implementation for just a few domains , 10-20 domains. In this case , there is a kb , article , or blog with a briefing or short explanation how to do it ?TeKi

That is still hosted Exchange and comes under that banner. It is only supported by Microsoft on Exchange 2007, no other versions at this time. You will still need to have a hosting licence system in place. Doesn't matter if it is 5 or 500 domains. Address list segregation (which is the GAL separation) has a high failure rate and if you aren't on a supported platform then you will not get support from Microsoft. It is a complex change and support on forums is non-existent, because most people who are doing it will have support agreements with Microsoft. I can't stress enough - this is not something that you can do overnight or without Microsoft's support. On the numbers you have talked about I wouldn't even consider doing it myself, I would simply outsource it with one of the major hosted Exchange providers who provide a white label solution and leave it to someone else to manage. A hosted Exchange platform doesn't really pay until you have at least 10,000 users on it. Simon.Simon Butler, Exchange MVP. http://blog.sembee.co.uk , http://exbpa.com/

Hello, Agree with Sembee and addition to You would be more interested in reading the permission model. Working with Active Directory Permissions in Exchange Server http://technet.microsoft.com/en-us/library/bb124223(EXCHG.65).aspx Working with Active Directory Permissions in Microsoft Exchange Server 2003 http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0954b157-5add-48b8-9657-b95ac5bfe0a2 Arun Kumar | MCSE:W2K3 + Messaging | MCTS:Exchange 2007 | MCTS:OCS 2007 R2 | ITIL-F V3

tank you all people. With all your answers i wondering if this is the right way to do it , i think i have to consider an alternative.TeKi