Solved

Block Exchange Advanced\Mailbox Rights feature in AD Users and Computers

Posted on 2009-04-15
2
310 Views
Last Modified: 2012-05-06
Hi Experts,

A quick question to which there's probably a simple answer. I'd like to give some of our non helpdesk users (trainers to be precise) the right to create and possibly delete mailboxes AD Accounts/ Mailboxes WITHOUT the ability to amend the mailbox rights to that or other accounts. I'd like of possible to avoid creating MMC's all over the place. I've tried using the Delegate Control Wizard in Systems Manager and setitng them with Exchange View Only Admin access. This stops them from being able to change the users group memberships but still doens't stop them from viewing/changing maibox right.

Thanks.
0
Comment
Question by:fruitdiver
2 Comments
 
LVL 13

Accepted Solution

by:
consultkhan earned 125 total points
Comment Utility
The right to create/delete ad accounts and mailboxes will give them access to all the possible features over a mailbox property in exchange.Most restrictive permissions could be applied using active directory access control lists and blocking these users accounts (trainers) to specific AD properties like allow full control,external account access .Try deny permissions using AD for trainers account in a test scenario.

thanks,
consultkhan
0
 

Author Closing Comment

by:fruitdiver
Comment Utility
Fair enough. Something for them to work in future versions perhaps. Thanks.
0

Featured Post

The problems with reply email signatures

Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

Join & Write a Comment

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now