DO NOT want the NT group to be able to change the mailbox size limit (mailbox quota).

I am trying to give a group to create and modify users' accounts, but I also DO NOT want them to be able to change the limits of mailboxes.

I give them deny premission to
mDBOverHardQuotaLimit
mDBOverQuotaLimit
mDBStorageQuota
mDBUseDefaults

BUT they are still able to change the Limits on a mailbox.

Winows 2003 SP2
Exchange 2003 SP2

Thank you!

LVL 1
ManzourAsked:
Who is Participating?
 
Stacy SpearPresident/Principal ConsultantCommented:
"pointed to the InetOrgPerson objects atribute"

You need this applied to user objects, not InetOrgPerson objects.
0
 
Stacy SpearPresident/Principal ConsultantCommented:
Where was the deny permissions placed?
0
 
ManzourAuthor Commented:
I have all the accounts in OU. On the security tab I added the NT group and granted them the access (similar to the Account Operators group permission) but in the same time under the security tab>>Advanced>>Permissions>>Edit>>pointed to the InetOrgPerson objects atribute and then deny the write permissions on all:
mDBOverHardQuotaLimit
mDBOverQuotaLimit
mDBStorageQuota
mDBUseDefaults
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
ManzourAuthor Commented:
You just got it right :) it's working.
So what is the difference?

Thank you!
0
 
Stacy SpearPresident/Principal ConsultantCommented:
Users are users, InetOrgPersons are almost users but don't need to login, etc. But, you stated that folks were users so...
0
 
ManzourAuthor Commented:
YEB...that makes sense!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.