Dear All, we need to give access to our Help desk to be able to update our windows 2008 servers, including AD, EXCHANGE 2010, TMG, CAS/HUB etc. The issue is that we do not want them to be able to manage AD, Exchange, TMG consoles. Is there an easy way to do this, with out denying permission on file level? Thanks, Kyriakos Ioannou

Hello, in short you can't. Updating the server OS or applications require administrator permissions and this allow them also to configure the specific applications. And helpdesk personal should not work on the servers that's the part for the admins of the domain.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.