Re: Restricted Permission for User

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


xerox wrote:
> *Hi,
>
> I am wondering if anyone can help me solve the problem.
>
> OS: Windows Server 2003 and Exchange 2003
> I want to create a sub admin with all "Domain Admin" permission
> except for
> below:
> - delete log files
> - delete user account
> - delete mailboxes
>
> Thanks
>
> Alvin
> Systems Engineer
> Delteq (M) Sdn. Bhd *

I dont if this is exactly what you want but you could add him to the
'Domain Admins' group and set NTFS DENY permissions for 'Delete',
'Delete Subfolders and Files' and 'Take Ownership' for him specifically
at those folders.



--
mopeloss
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message1657415.html

.

Relevant Pages

  • Re: Exchange 2000 containers (Fields) not showing up in active directory!!
    ... Don't need to log on with a domain admin ID. ... exchange should be done, there is a chapter in the up and coming Windows Server ... Joe Richards Microsoft MVP Windows Server Directory Services ... >>be managing users directly from domain controllers, ...
    (microsoft.public.win2000.active_directory)
  • Re: Local Admin on Domain Controller?
    ... You need to make sure that you are separating the permissions. ... Delegating control implies administrative control (i.e. make ... with Exchange 2000, it no longer implies full access to all mailboxes. ... If you want the domain admin to have full access to all mailboxes, ...
    (microsoft.public.exchange.admin)
  • RE: Domain admin mailbox rights on Exchange 2003
    ... "Exchange Admins" are denied permissions by default, ... Domain admin mailbox rights on Exchange 2003 ...
    (Focus-Microsoft)
  • Re: New Exchange 2000 server wont join existing Ex 5.5 Organization
    ... account as the exchange administrator. ... When we specified the local domain admin account, ... > It sounds like there are still remnant of a previous install in the AD- ... >> to initially install an Exchange server on a regular member server to ...
    (microsoft.public.exchange2000.general)
  • Re: how to run a exe in DOMAIN ADMIN privilege from a local admin account?
    ... So is there any easy way with MAPI to achieve the same? ... Another option is to encapsulate the Exchange logic in a COM+ ... component and configure it to run under the domain admin account. ... I have a native C++ exe to fetch exchange server information. ...
    (microsoft.public.exchange.applications)