Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 298
  • Last Modified:

Exchange 2010 Management

I am new to exchange 2010 server.... I'll make it short I have main exchange server abc.com sub exchange (Child) child.abc.com the problem is the administrator on child.abc.com have access to all exchange org. same as root admin!!. I need to limit this to his level only. (Mange his server only).
0
albassam
Asked:
albassam
  • 2
1 Solution
 
Glen KnightCommented:
You can use the groups located in Active Directory to restrict access have a look at the Microsoft Exchange Security Groups.  Only allow the users to be a member of the Server Management group and recipient management group, this will prevent them from changing the Organisation Configuration.
0
 
albassamAuthor Commented:
no, its the same full permeation, I think the X Administrator misses with the groups! default settings.
Can you provide me with the default Groups settings.
0
 
Glen KnightCommented:
Exchange 2010 uses RBAC (Role Based Access Control), see here for further details: http://technet.microsoft.com/en-us/library/dd298183.aspx
0
 
NivleshCommented:
From Exchange Management Console
>get-rolegroup   will give you a list of all role groups
>get-rolegroupmember -Identity {rolegroup} will give you all members of this role group

You can then use
remove-rolegroupmember -Identity {rolegroupid} -member {member you want removed}

and this will remove that admin from the role so in effect you can lock him out of exchange 2010
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now