Split permission Exchange 2007 SP2.
Hi,
I would like to give delegation to our helpdesk, to give "Send As" permission on different mailboxes as per request.
we have Exchange 2007 SP2 on CCR cluster.
Any help is highly appreciated.
wasay.
wasay13
August 6th, 2011 9:08am
http://technet.microsoft.com/en-us/library/aa998291(EXCHG.80).aspx
Permissions Required:
Exchange View Only Administrator or higher and Account Operator or higher
Note that Send as are AD perms. So with account operator perms, the helpdesk could grant SEND AS using ADUC and never need access to the Exchange MGMT tools.
Free Windows Admin Tool Kit Click here and download it now
August 6th, 2011 10:26am
Hi wasay13,
Any updates?
Frank Wang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com
August 8th, 2011 3:43am
Hi,
Andy, We don't prefer to give Account Operator permission to helpdesk if any granuler way of delegating let me know and will like to help desk to use Exchange mgmt to assign send as(optional).
Thankx
wasaywasay13
Free Windows Admin Tool Kit Click here and download it now
August 8th, 2011 7:44am
Hi wasay13,
Please try this way: What permissions do I need to modify the mailbox permissions of a user object?
1, Exchange View-Only Administrator role
2, Administer Information Store permission granted on the mailbox store where the mailbox resides
3, Write permission granted on the user account to modify the permissions.
Exchange 2007 Permissions: Frequently Asked Questions
http://technet.microsoft.com/en-us/library/bb310792(EXCHG.80).aspx
Details:
1, add Helpdesk to either Exchange View-Only Administrator or Exchange Recipient Only Admin group.
2, The permission Administer Information Store can be granted at Organization level, or database level:
Add-ADPermission -Identity "Distinguished Name of Exchange Organization" -User "Domain\helpdesk" -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin -InheritanceType All
3, A. Open ADUC.
B. Ensure that you have enabled Advanced Features by selecting View > Advanced Features.
C. Right Click on ad.umd.edu and select properties.
D. Select Security Tab and select Advanced button.
E. Click on Add button.
F. Type the name of the Admin account or Admin group to which you want to grant permission to modify the permission and click on OK.
G. Grant Modify Permissions and Read permissions to this admin account or admin group and apply the permission settings.
Frank Wang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com.
August 9th, 2011 2:49am
Hi Frank,
Giving permission on "store" will give the previlege to dismount the databases.
thanks
wasaywasay13
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2011 4:04am