Link to home
Start Free TrialLog in
Avatar of every1isevil2
every1isevil2Flag for United States of America

asked on

Exchange 2010 RBAC - add permission to created user and add to security groups

I need to add permission to the built in Help Desk Role Group in Exchange 2010 so that my help desk staff can created users/mailboxes and add them to AD groups in an OU that is "staff.zorten.edu/mcc".

I need the syntax for the Exchange Management Shell since apparently there is no way to do this from the ECP.
Avatar of J P
J P
Flag of Australia image

hello there

the default role group in Exchange 2010 is "Help Desk"
http://technet.microsoft.com/en-us/library/dd876949.aspx

the default role needed to create mailboxes is "Mail Recipient Creation"
http://technet.microsoft.com/en-us/library/dd876915.aspx

to set this permission can run the following command in shell:
New-ManagementRoleAssignment -SecurityGroup "Help Desk" -Role "Mail Recipient Creation"
http://technet.microsoft.com/en-us/library/dd638202.aspx

cheers
Avatar of every1isevil2

ASKER

I want to limit the scope to a single OU.  Can you give me a sample syntax?
you need to delegate control for the helpdesk also in ou of active directory so they can create and manage user accounts in addition to adding the management role assignment in EMS
ASKER CERTIFIED SOLUTION
Avatar of J P
J P
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial