Re: create mailbox permissions

From: Boris Lokhvitsky (msexpert_at_comcast.net)
Date: 05/07/04 

Date: Fri, 7 May 2004 09:13:47 -0700

Yes you are correct Mark. They don't have the View Only Admin right, so they
don't see mailbox stores in the user creation dialog. After granting this
right, everything works fine.
I just wanted to say, that Account Operators is native Microsoft proposed
solution for the accounts creation task, which makes it easy to use.

Thanks for your remark and correction,
Boris

"Mark Fugatt [MVP]" <news@4mcts.com> wrote in message
news:uAdVUdsMEHA.3400@TK2MSFTNGP09.phx.gbl...
> The Account Operators group don't have access to the Exchange Admin Groups
> by default, do they?
>
> And the Account Operator group can also do a lot more than just create
> users, they can also play with groups etc, sorry not trying to split hairs
> :-)
>
> --
> Mark Fugatt
> Exchange MVP
> http://www.exchangetrainer.com
> http://www.msexchange.org
> "Boris Lokhvitsky" <msexpert@comcast.net> wrote in message
> news:eK45HVsMEHA.1348@TK2MSFTNGP12.phx.gbl...
> >I believe it can be done easier. Just include these users accounts into
the
> > built-in Account Operators group.
> >
> > Regards,
> > Boris
> >
> >
> > "Mark Fugatt [MVP]" <news@4mcts.com> wrote in message
> > news:%23UKzMSsMEHA.3096@TK2MSFTNGP12.phx.gbl...
> >> Deletegate the rights in AD to create users, and give them Exchange
View
> >> Only Admin rights to the administrative group that contains the Stores
> > that
> >> you want the mailbox to be create in via Exchange System Manager.
> >>
> >> --
> >> Mark Fugatt
> >> Exchange MVP
> >> http://www.exchangetrainer.com
> >> http://www.msexchange.org
> >> "Victor Leonov" <vleonov@e.com> wrote in message
> >> news:OJSUNLsMEHA.1388@TK2MSFTNGP09.phx.gbl...
> >> > Hello!
> >> >
> >> > I have to grant minimum rights to helpdesk users for creating new AD
> >> > user/mailbox. What is minimum rights group membership should I
provide
> > for
> >> > helpdesk employee?
> >> >
> >> > Thanks a lot
> >> > Victor Leonov
> >> >
> >> >
> >>
> >>
> >
> >
>
>

Relevant Pages

  • Active Directory, Exchange Schema Extensions and admin rights
    ... and one of the tasks at hand is to set admin rights ... I switched those users that needed to admin user accounts to be ... Account Operators, but thats thrown up another block - they can no ... Is there anyway to add these rights to the Account Operators group, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Administrators Group in Local Users and Groups
    ... I do not see a problem with adding junior admins to the Account Operators ... Builtin groups have a well known sid, in the case of acc ops it is ... > you applied it to an admin group, it would give a resolution error. ... >> each workstations administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Operators Group
    ... Account Operators group is listed in the security tab of the user object. ... When a user object is created, I believe the system adds an ACE that grants ...
    (microsoft.public.win2000.active_directory)
  • Re: Administrators Group in Local Users and Groups
    ... However think of if it did work, that SID has no domain affinity so ANY account operator of ANY domain would then have admin rights to your workstations. ... I am trying to find out how to add in the domain group Account Operators to each workstations administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to control enable/disable user account rights
    ... Maybe your account operators need some further introduction how to handle your company policies? ... Or you maybe have to create a new security group, add your users and delegate control on a specific OU with only the needed permissions for them instead of using the account operators group. ... account operators will re-enable a user account and leave it in this ...
    (microsoft.public.windows.server.active_directory)
Loading