Exchange Full Administrator permission

Exchange security
Microsoft Exchange
Hi, Is it correct that by granting Exchange Full Administrator group with only READ access on the Organization level will not allow the Exchange administrators to have 'Delegate Access' on the Administrative group that they already have Full access to? Regards

Answer Wiki

Thanks. We'll let you know when a new response is added.

Administrative permissions vary somewhat based on the version(s) of Exchange Server that you are running. In Exchange 2003, there are three levels of administrative rights that can be configured. In Exchange 2007, there are two options for assigned administrative permissions. I recommend that you familiarize yourself with basic Exchange 2003 and Exchange 2007 administrative concepts by taking a look at the tip, Exchange Admin 101: Exchange 2003 and Exchange 2007 admin privileges.

What it is exactly that you are trying to accomplish though? Configuring Microsoft Exchange Server permissions can be tricky. I do not recommend modifying default permissions for built-in or default groups. Microsoft Exchange and Active Directory permissions are tightly integrated and, by default, administrators are denied access to all mailboxes.

Administrators can override this on a per-mailbox, store or server level at any time. Therefore, if this is truly a concern, consider:

  • Hiring and maintaining only trustworthy administrators
  • Enabling auditing and alerting in your environment so that object access and changes, such as those required to override the default deny in this case, are recorded and the appropriate individuals (e.g., management, security, HR, etc.) are notified

These resources may also be helpful to you:<ul>

Discuss This Question: 2  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Blueberries
    Hi, We are trying to install Microsoft System Centre Operations (SCOM). The setup program will tries to automatically install a security group into the Administrative group (to give view only permission) - and it keep failing because of insufficient access to the Administrative Group. Is there a workaround for situation as so? Many Thanks
    15 pointsBadges:
  • Wrobinson
    Make sure that the account that you are using to perform the installation has the required level of permissions to create the group or create the group manually.
    5,625 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: