[Last Call] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 459
  • Last Modified:

Query on Exchange Administration Delegation Wizard

Hi All

We are running Exchange 2003.

I was looking at setting up groups for delegating permissions for my Exchange Administrative group...however, just wanted to check - if User1 is a member of Group1 that is given the View Only Admin role, and also member of Group2 that has the Exchange Full Administrator role for that Administrative Group, which one takes preference and is there any place I can view this?

  • 2
1 Solution
You'll definitely get the higher permission in this case, because when allowing permissions, they just add on top of one another.  It's only deny permissions that would have this effect you're worried about, because a deny always overrides an allow.
There is a place ... but I'm sorry I don't have any Exchanges nearby to find where it is.
BTW the recommendation is to make 3 AD security groups for your 3 Exchange Admin roles.  Place each role into 1 of the groups.  Then you can just add groups and users to the AD group, which makes life easier in the future.

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now