Solved

Exchange 2010 Management

Posted on 2011-03-14
4
274 Views
Last Modified: 2012-06-21
I am new to exchange 2010 server.... I'll make it short I have main exchange server abc.com sub exchange (Child) child.abc.com the problem is the administrator on child.abc.com have access to all exchange org. same as root admin!!. I need to limit this to his level only. (Mange his server only).
0
Comment
Question by:albassam
  • 2
4 Comments
 
LVL 74

Expert Comment

by:Glen Knight
ID: 35126494
You can use the groups located in Active Directory to restrict access have a look at the Microsoft Exchange Security Groups.  Only allow the users to be a member of the Server Management group and recipient management group, this will prevent them from changing the Organisation Configuration.
0
 

Author Comment

by:albassam
ID: 35126823
no, its the same full permeation, I think the X Administrator misses with the groups! default settings.
Can you provide me with the default Groups settings.
0
 
LVL 74

Accepted Solution

by:
Glen Knight earned 500 total points
ID: 35126838
Exchange 2010 uses RBAC (Role Based Access Control), see here for further details: http://technet.microsoft.com/en-us/library/dd298183.aspx
0
 
LVL 8

Expert Comment

by:Nivlesh
ID: 35143482
From Exchange Management Console
>get-rolegroup   will give you a list of all role groups
>get-rolegroupmember -Identity {rolegroup} will give you all members of this role group

You can then use
remove-rolegroupmember -Identity {rolegroupid} -member {member you want removed}

and this will remove that admin from the role so in effect you can lock him out of exchange 2010
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
In this video we show how to create a User Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Mailb…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question