Secure who can and cannot create mailboxes

Hi,
   It seems like a desktop supp. tech created a user account along with a mailbox for a new user that was not supposed to have a mailbox.
The only way i can think of how he could have created the mailbox was if he had Exchnge Sys Mngr tools installed on his PC. If he did, how can I prohibit him from doing it again? He does not have any access to the exchange server at all. How else can a mailbox be created?
Thanks.
sudipmisAsked:
Who is Participating?
 
SembeeConnect With a Mentor Commented:
The only way is for the Exchange tools to be installed. Otherwise the extensions aren't there. You can soon tell by accessing ADUC on the machine. Could also have lifted all the dlls and registered them manually.

You need to look at the delegation settings in both the domain and Exchange. You should be able to restrict the tech down using those.

Simon.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.