I know exchange 2010 comes with predefined roles (which are AD groups, i.e. organisation management) to assign admins permissions over the exchange server for admin/support. But is it possible to add users directly to elements of exchange outside of these predefined roles/groups. Ie can you be sure the only people with access across your exchange environment are those with memebership to the default groups, or if not, how would you determine which users have access to what within your exchange environment? where would you look?
I am quite familiar with the security model for other MS server apps like SQL Server, and again there are roles which you can add users to, but you dont have to. I wasnt sure where to start with seeing which local/domain accounts have access to what over the exchange environemtn.