Re: Delegating Echange Full Admin Roghts



I am doing just that, logged in with an account that has exchange full admin
rights, and trying to delegate, at the end of delegation i get an error
saying "the account has to be a member of a local admin group in order to
fully administer exchange server". Nopw the account stayes in the delegation
window, but not in the security tab on the servers.

Thank For you help
VB


"Ben Winzenz [Exchange MVP]" wrote:

What specifically didn't work? The delegation? You can only delegate
rights to other accounts using an account that is already an Exchange Full
Administrator. If you are signed on as yourself (even if you are a domain
admin), and trying to delegate Exchange Full admin rights to your account,
it won't work. When you do the delegation, look at which other accounts
already have Exchange Full Admin rights, and sign on as one of those
accounts.

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"VB" <vb@xxxxxxxxxxxx> wrote in message
news:598D2CD3-E2C0-4BC9-90A4-26363FAFB230@xxxxxxxxxxxxxxxx
Thanks for the info, i will consider this going foward, yet the issue at
hand
is that I cannot delegate admin rights to a user.

"Ben Winzenz [Exchange MVP]" wrote:

In that case, in addition to delegating Exchange Admin rights (Full Admin
really isn't needed), typically you need Send As and Receive As
permissions
on the mailbox stores. Coincidentally, when you delegate Full Admin
rights,
an inherited Deny is placed on the mailbox stores for that user, so
you'll
have to modify the Deny and explicitly set an Allow fo that user account.
This is set on the Mailbox Store properties, Security tab.

On another note, why do you want to perform mailbox-level backups? What
do
you feel it will gain you over a traditional online backup? Sure, it
lets
you restore individual mailboxes (or individual items) if needed, but at
what cost? Mailbox level backups (lovingly refererred to as Brick level
Backups) typically vastly increase the time and amount of tape needed for
a
backup. Since Exchange 2003 has both deleted items retention and deleted
mailbox retention, along with the Recovery Storage group, the usefulness
of
BLB's has vastly declined.

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"VB" <vb@xxxxxxxxxxxx> wrote in message
news:0BDB70CA-536E-4109-83FF-8922565FA377@xxxxxxxxxxxxxxxx
Yes, i am.

"Ben Winzenz [Exchange MVP]" wrote:

What exactly is your backup service acount trying to back up? Are you
trying to back up individual mailboxes (guessing)?

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"VB" <vb@xxxxxxxxxxxx> wrote in message
news:AEDFD5FF-CE17-42D9-88A3-3915B6B6DAC8@xxxxxxxxxxxxxxxx
Hi,
I am trying to setup a backup servive account to backup my exchange
services. The issue im having is at the end of delegation, an error
messgae
says I have to be a local admin on the machine. I went ahead and
added
this
account as local admin - did not work, I even added it as a domain
admin
(testing) did not work. Then being that im a domina admin and local
admin
on
teh exchange server i added my self, and again it did not work. Any
clue??

I am ryunnnig ad 2003 native mode, excahgne 2003 sp1 on win2k3 with
sp1

Let me know...becuase this is really strange....Thanks VB









.



Relevant Pages

  • Re: Cant establish a delegate - solution
    ... with the delegate problem. ... illustrates what needed to be done in my Exchange environment. ... field of Account settings for the Exchange account. ... I'm running Exchange Server 2003 on Windows Server 2003 with all service ...
    (microsoft.public.mac.office.entourage)
  • Re: Calendar Appointments/Meetings
    ... the same issue of the calendar entries not showing up in his calander when ... Type of account? ... Exchange ... do you have any delegate? ...
    (microsoft.public.office.misc)
  • Re: Install exchange 2003 in child domain
    ... this same situation, but cannot get exchange to run, because several of the ... > Login to root-forest DC with account that is a member of Enterprise Admins, ... > configured during forestprep. ... > child domain with a domain admin account and manually run Domainprep there. ...
    (microsoft.public.exchange.setup)
  • Re: Delegating Echange Full Admin Roghts
    ... rights to other accounts using an account that is already an Exchange Full ... admin), and trying to delegate Exchange Full admin rights to your account, ...
    (microsoft.public.exchange.admin)
  • Re: Shared Calendar with Entourage 2004
    ... I have a Exchange server 2000 and cant get it to work. ... > set up properly in the account settings. ... > shared must first set up delegate access in Outlook. ...
    (microsoft.public.mac.office.entourage)