What does the "Administer Information Store" privilege allow one to do in Exchange?

Posted on 2005-04-26
Last Modified: 2010-05-18

Am looking for some information as to exactly what the Administer Information Store privilege allows a user to do in Exchange.  MSDN, Technet and MS KB have been extremely unhelpful.  I need to grant this authority to a group of users who will be administering Blackberry users (we have tested without and it does not work), but I would really like to know exactly what this will allow them to do.  This group does not administer exchange, and does not have the exchange system manager installed, but in the event one of them were to do this, what would be the potential impact?


Question by:jwinzenz

    Author Comment

    I am increasing the point value in the hopes of getting a quick answer.
    LVL 21

    Accepted Solution

    It allows whoever holds the right to modify the mailbox rights of users on that store, and also allows them to mount/dismount the store.

    Author Comment

    Thank you for that answer, and I will ask another question - is there another way to grant users the ability to modify the mailbox rights of users without granting the "administer information store" right?  I suspect this is the part that is required for our group who needs to administer blackberry users, but they certainly do not need the ability to mount and dismount the store.
    LVL 21

    Expert Comment

    You can grant the users "Change Permissions" rights on mailbox rights.  To do this in bulk you can use the ADModify tool (  Other than that, I think you have to grant the administer information store right.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Shouldn't all users have the same email signature?

    You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
    how to add IIS SMTP to handle application/Scanner relays into office 365.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now