slattdog
asked on
Structuring Admin Roles for Office 365 Exchange Admins
https://www.experts-exchange.com/questions/28650647/Block-Admin-Access-to-Specific-Exchange-Mailbox.html
My apologies if there is a way to reopen a question and I just didn't see it. I followed Vasil's instructions in the question above, and was able to get the exclusive policy setup and it does restrict other admins from modifying the executive mailboxes. The problem now is that I can't seem to get an Admin Role configured that gives admins the necessary permissions (create mailboxes, reset password, distribution groups, message trace, etc.), without also giving them the ability to modify the admin groups. Obviously, if they can just add themselves to the exclusive group, that would defeat the purpose. :-)
My apologies if there is a way to reopen a question and I just didn't see it. I followed Vasil's instructions in the question above, and was able to get the exclusive policy setup and it does restrict other admins from modifying the executive mailboxes. The problem now is that I can't seem to get an Admin Role configured that gives admins the necessary permissions (create mailboxes, reset password, distribution groups, message trace, etc.), without also giving them the ability to modify the admin groups. Obviously, if they can just add themselves to the exclusive group, that would defeat the purpose. :-)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.