asked on

Freeing up Exchange / AD admins

We'd like our helpdesk to be able to Create Active directory users (AD Win2k12r2) and Exchange Mailboxes (Exchange 2013). Without giving them Domain Admin and total Exchange Admin permissions...

If it could be automated as much as possible great....

Any native software or 3rd party software that can help we'll take a look at.

We're trying to free up our AD/Exchange Admins from the basic user setups

Blake Long

You can give users permissions to alter only certain parts of AD without giving them full domain admin rights.

Try this article and this article

Then depending on what version of windows your servers and desktops are running you may be able to give the users you want to be able to do this access via server manager installed on the desktop.

SOLUTION

cwstad2

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Amit

Just add your helpdesk team to account operator and recipient management group in AD. That is enough rights to create, modify and remove user or mailbox. No Domain admin rights required.

If you use Delegate rights, then you need to give them on every OU, I try to avoid delegating rights. As you will not be freed and helpdesk will be calling you for right issue again and again.

ASKER CERTIFIED SOLUTION

Will Szymkowski

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

cwstad2

Hi how did you get on

bernardb

ASKER

Thanks Experts! So sorry for the delay