<div>
Where was the deny permissions placed?
</div>


<div>
I have all the accounts in OU. On the security tab I added the NT group and granted them the access (similar to the Account Operators group permission) but in the same time under the security tab&gt;&gt;Advanced&gt;&gt;Permissions<wbr />&gt;&gt;Edit&gt;&gt;po<wbr />inted to the InetOrgPerson objects atribute and then deny the write permissions on all: <br />
mDBOverHardQuotaLimit<br />
mDBOverQuotaLimit<br />
mDBStorageQuota<br />
mDBUseDefaults<br />

</div>


I have all the accounts in OU. On the security tab I added the NT group and granted them the access (similar to the Account Operators group permission) but in the same time under the security tab>>Advanced>>Permissions>>Edit>>pointed to the InetOrgPerson objects atribute and then deny the write permissions on all:
mDBOverHardQuotaLimit
mDBOverQuotaLimit
mDBStorageQuota
mDBUseDefaults


<div>
You just got it right :) it's working.<br />
So what is the difference?<br />
<br />
Thank you!
</div>


You just got it right :) it's working.
So what is the difference?

Thank you!

<div>
Users are users, InetOrgPersons are almost users but don't need to login, etc. But, you stated that folks were users so...
</div>


Users are users, InetOrgPersons are almost users but don't need to login, etc. But, you stated that folks were users so...

<div>
<div class="content wysiwyg-content">
I am trying to give a group to create and modify users' accounts, but I also DO NOT want them to be able to change the limits of mailboxes.<br />
<br />
I give them deny premission to<br />
mDBOverHardQuotaLimit<br />
mDBOverQuotaLimit<br />
mDBStorageQuota<br />
mDBUseDefaults<br />
<br />
BUT they are still able to change the Limits on a mailbox.<br />
<br />
Winows 2003 SP2<br />
Exchange 2003 SP2<br />
<br />
Thank you!<br />
<br />

</div>
</div>


I am trying to give a group to create and modify users' accounts, but I also DO NOT want them to be able to change the limits of mailboxes.

I give them deny premission to
mDBOverHardQuotaLimit
mDBOverQuotaLimit
mDBStorageQuota
mDBUseDefaults

BUT they are still able to change the Limits on a mailbox.

Winows 2003 SP2
Exchange 2003 SP2

Thank you!



DO NOT want the NT group to be able to change the mailbox size limit (mailbox quota).

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.