Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 424
  • Last Modified:

Set user permission to have right to create mail-enable account

Dear All,

Can I know how can I set the minimum permission to have right to create mail-enable account.

I have root AD called test.com, child dc called hk.test.com (installed exchange2003 server), and cn.test.com(only installed ESM)

cn.test.com 's mail accoount store in hk.test.com 's exchange server, now I would like to assign permission to cn.test.com some domain user to have minimum permission to create mail enable account.

When I create mail-enable account, I have no choice in "mail store"  option except root administrator. What permission I need to set to that user?

1 Solution
The user will probably need Exchange Administrator rights (Delegate in Exchange System Manager).
Then delegate rights through Exchange System Manager. Right click on the domain in ADUC and choose Delegate Control. You will need to setup a custom control and then grant the rights as required. You may have to play with different combinations of the permissions to get the rights that you want.


Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now