RE: Exchange 2000 & Administrator Rights

From: Alan Sun [MSFT] (v-asun_at_online.microsoft.com)
Date: 05/07/04


Date: Fri, 07 May 2004 07:43:17 GMT

Hi Philip,

I notice this issue is duplicated with your another thread. I reply in your
original thread. If you need further help, please reply in the original
one. For you convenience, I have pasted my reply as follows.

Thanks & Regards
Alan Sun
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++

Hi Philip,

Thanks for your posting here.

Based on my knowledge, in order to be an Exchange Full Administrator or
Exchange Administrator (who both have read/write access to objects) on an
organization or administrative group, a user must be a local machine
administrator for each Exchange Server he or she needs to manage.
Therefore, the Full Exchange Administration should be a member of local
administrator. This behavior is by design.

For more information, please to the following articles:
289811 XGEN: Exchange 2000 Role Permissions
http://support.microsoft.com/?id=289811

Hope this helps! Have a nice day!

Thanks & Regards
Alan Sun
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
     |From: "Philip Amos" <someone@somewhere.com>
     |Subject: Exchange 2000 & Administrator Rights
     |Date: Thu, 6 May 2004 16:27:31 +0100
     |Lines: 22
     |X-Priority: 3
     |X-MSMail-Priority: Normal
     |X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
     |X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
     |Message-ID: <OtrTn63MEHA.2876@TK2MSFTNGP09.phx.gbl>
     |Newsgroups:
microsoft.public.exchange2000.active.directory.integration,microsoft.public.
exchange2000.general,microsoft.public.exchange2000.setup.installation
     |NNTP-Posting-Host: 193.82.89.222
     |Path:
cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09
phx.gbl
     |Xref: cpmsftngxa10.phx.gbl
microsoft.public.exchange2000.general:55170
microsoft.public.exchange2000.setup.installation:31630
microsoft.public.exchange2000.active.directory.integration:16284
     |X-Tomcat-NG: microsoft.public.exchange2000.setup.installation
     |
     |Can anybody please tell me why a user which has been delegated the
Exchange
     |Full Administrator right still needs to be a member of the local
machines
     |Administrator group??
     |
     |What I would idealy like to do if specifically grant rights over the
     |necessary objects withing the directory\file system\registry etc to my
     |Exchange administrators and not have them as members of the
Administrators
     |group. The reason for this is that Exchange 2000 is installed on some
     |Domain Controllers and the local Administrators group is the one in
the
     |Domain which then grants people rights over other stuff that I do not
want
     |them to have access to.
     |
     |The problem is that I have been unable to find any documents either in
     |TechNet or on the web which explain what rights a member of the local
     |Administrators group gets over Exchange which make membership of this
group
     |necessary and would appreciate it if somebody can tell me what rights
I need
     |to grant.
     |
     |Thank you
     |Philip Amos
     |
     |
     |



Relevant Pages

  • RE: Administrator locked out of exchange organization HELP!!!!
    ... A method to recover your Administrative permissions to the Server object is ... Administrator rights at the AG level. ... within Exchange, and how to set mailbox access. ...
    (microsoft.public.exchange.admin)
  • Re: Exchange 2000 & Administrator Rights
    ... Thank you for this but again I cannot beleive that you need full rights over ... to do with Exchange and as a result do not need rights. ... > To completely administrator the Exchange server, ... > Administrator should be a member of local administrator. ...
    (microsoft.public.exchange2000.general)
  • Re: Exchange 2000 & Administrator Rights
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... |To completely administrator the Exchange server, ... |Administrator should be a member of local administrator. ...
    (microsoft.public.exchange2000.general)
  • RE: Exchange 2000 & Administrator Rights
    ... Exchange Administrator on an ... This posting is provided "AS IS" with no warranties, and confers no rights. ... |Administrators group gets over Exchange which make membership of this ...
    (microsoft.public.exchange2000.general)
  • Re: Exchange 2000 & Administrator Rights
    ... To completely administrator the Exchange server, ... Administrator should be a member of local administrator. ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.exchange2000.general)