vickytaurus
asked on
Problem with Exchange View-Only Administrator role.
I am working on an environment of Exchange Shell 2007 in a domain. Users of the domain are controlled by Active Directory(AD). I have created a user "test" on the AD. This user is just member of "Domain Users" and not any other group. When i am trying to execute cmdlets like "get-group", "get-mailbox" from this user, it is executing perfectly, even after the fact that "test" user is not member of "Exchange View-Only Administrators".
According to the Microsoft documentation, the account you use must be delegated the "Exchange View-Only Administrator role".
I have used this, as a check in the Installer of the software, to verify that the user has Exchange View-Only Administrator role.
Can anybody help me to find out the reason why this is happening?
According to the Microsoft documentation, the account you use must be delegated the "Exchange View-Only Administrator role".
I have used this, as a check in the Installer of the software, to verify that the user has Exchange View-Only Administrator role.
Can anybody help me to find out the reason why this is happening?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You cannot remove someone from Authenticated Users if they have a domain user account. You could try running the commands from a local user account on the server and observe the behaviour, this would be equivalent to not being a member of Auth Users.
As indicated, all users have access to read the majority of Active Directory.
As indicated, all users have access to read the majority of Active Directory.
if you want to verify, try a different cmdlet like get-mailboxdatabase
ASKER
Thanks endital1097 for your solution. I am exploring with the guidelines provided by you. For now it seems that issues is resolved.
Thanks again.
Thanks again.
ASKER
If this is the reason, then is there a way i can remove a user from "Authenticated Users" so that i can test the case of failure(cmdlets not executing)?
Thanks a lot for your response.