Re: Active Directory, Exchange Schema Extensions and admin rights

Tech-Archive recommends: Fix windows errors by optimizing your registry

Richard-

You need to delegate access to all of the Exchange attributes. This is much
easier with Exchange 2007 as groups are added to AD with the delegations
already in place.

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"Richard Price" <richardprice@xxxxxxxxx> wrote in message
news:3619237f-3cfe-4260-bc6c-ae51d9b1d0ae@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have recently taken over the administration of my companies
infrastructure, and one of the tasks at hand is to set admin rights
correctly - previously, all support staff et al were full Domain
Admins.

I switched those users that needed to admin user accounts to be
Account Operators, but thats thrown up another block - they can no
longer admin the Exchange schema additions to AD.

Is there anyway to add these rights to the Account Operators group, or
setup a new admin group with the correct permissions? I really do not
want these operators to be full domain admins, as they aren't.

Regards
Richard


.

Relevant Pages

  • Re: Email being received on my renamed admin account
    ... I'd still like to know how someone could have even guessed my admin name. ... > which you never use to send internet emails. ... > accounts that exists on your Exchange server, ...
    (microsoft.public.windows.server.sbs)
  • Re: other peoples mailbox
    ... It is impossible to maintain or trouble shoot, exchange related issues ... there and walk them through or troubleshoot any issue. ... the admin is probably also the helpdesk and they walk ... depend more of the environment, and Employers must trust their Exchange or Ad ...
    (microsoft.public.exchange.admin)
  • Re: Application Error
    ... > Exchange 2003. ... ADC complaint some folders are moved. ... my mail admin account didn't have Schema and Enterprise ... to Custom Install for Exchange 2003? ...
    (microsoft.public.exchange.admin)
  • Re: Permission to add email address to user
    ... "Giving the kiadmin user Exchange Full Administrator rights gives the ... email addresses unless they are also a local admin on the machine. ... Giving the kiadmin user Exchange Full Administrator rights gives the same ...
    (microsoft.public.exchange.admin)
  • Re: Administrators Group in Local Users and Groups
    ... I do not see a problem with adding junior admins to the Account Operators ... Builtin groups have a well known sid, in the case of acc ops it is ... > you applied it to an admin group, it would give a resolution error. ... >> each workstations administrator group. ...
    (microsoft.public.windows.server.active_directory)