Split permission Exchange 2007 SP2.
Hi, I would like to give delegation to our helpdesk, to give "Send As" permission on different mailboxes as per request. we have Exchange 2007 SP2 on CCR cluster. Any help is highly appreciated. wasay. wasay13
August 6th, 2011 9:08am

http://technet.microsoft.com/en-us/library/aa998291(EXCHG.80).aspx Permissions Required: Exchange View Only Administrator or higher and Account Operator or higher Note that Send as are AD perms. So with account operator perms, the helpdesk could grant SEND AS using ADUC and never need access to the Exchange MGMT tools.
Free Windows Admin Tool Kit Click here and download it now
August 6th, 2011 10:26am

Hi wasay13, Any updates? Frank Wang Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com
August 8th, 2011 3:43am

Hi, Andy, We don't prefer to give Account Operator permission to helpdesk if any granuler way of delegating let me know and will like to help desk to use Exchange mgmt to assign send as(optional). Thankx wasaywasay13
Free Windows Admin Tool Kit Click here and download it now
August 8th, 2011 7:44am

Hi wasay13, Please try this way: What permissions do I need to modify the mailbox permissions of a user object? 1, Exchange View-Only Administrator role 2, Administer Information Store permission granted on the mailbox store where the mailbox resides 3, Write permission granted on the user account to modify the permissions. Exchange 2007 Permissions: Frequently Asked Questions http://technet.microsoft.com/en-us/library/bb310792(EXCHG.80).aspx Details: 1, add Helpdesk to either Exchange View-Only Administrator or Exchange Recipient Only Admin group. 2, The permission Administer Information Store can be granted at Organization level, or database level: Add-ADPermission -Identity "Distinguished Name of Exchange Organization" -User "Domain\helpdesk" -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin -InheritanceType All 3, A. Open ADUC. B. Ensure that you have enabled Advanced Features by selecting View > Advanced Features. C. Right Click on ad.umd.edu and select properties. D. Select Security Tab and select Advanced button. E. Click on Add button. F. Type the name of the Admin account or Admin group to which you want to grant permission to modify the permission and click on OK. G. Grant Modify Permissions and Read permissions to this admin account or admin group and apply the permission settings. Frank Wang Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
August 9th, 2011 2:49am

Hi Frank, Giving permission on "store" will give the previlege to dismount the databases. thanks wasaywasay13
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2011 4:04am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics