Best method give user user account creation / email creation only.

I need to set it up to allow our HR director the ability to create users and assign them an email address. I don't want to give them any other system admin abilities.
GSLElectricAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
Hi,

I would recommend against this point 1.

If you really want to set this up as the built in exchange groups are not great in regards to versatility permissions wise the only way i really see to do this is http://www.msexchange.org/articles-tutorials/exchange-server-2010/management-administration/exchange-2010-role-based-access-control-part1.html

Setting up role based access which the steps are very detailed and outlined in msexchange article above.

I had the same issue, we opted against doing this.
raghavendra2512System AdministratorCommented:
Hi,

Please let me know which version of Exchange Server are you using. In case if you are using Exchange server 2010. You can use the Role Based Access Control (RBAC) feature in Exchange Control Panel (ECP).
Let me know if you require more help on RBAC.
Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
The link i provided is to setup RBAC. fyi.
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

GSLElectricAuthor Commented:
Version 2007 is our exchange version
Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
Hi,

Msexchange have a 2007 article too, I would say its much the same as both versions are very similar.

http://www.msexchange.org/articles-tutorials/exchange-server-2007/management-administration/exchange-2007-permissions-and-roles-part1.html

M

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Will SzymkowskiSenior Solution ArchitectCommented:
Exchange 2007 does not have RBAC. It uses ACL's to apply permissions. However the group you would probbaly have to give access to is the Exchange Recipient Administrator Role. To have all of the functionality that you are looking for.

Will.
raghavendra2512System AdministratorCommented:
you can use the Exchange Shell command: Add-ExchangeAdministrator -Identity 'User DisplayName' -Role RecipientAdmin.

     At your own Rist: In case if you want to give more granular level of permissions, open adsiedit.msc, verify the special permissions for 'Exchange Recipient Administrator' on the below container
dc=domain,dc=ext
cn=InformationStore,cn=microsoft exchange,cn=services,cn=configuration,dc=domain,dc=ext
These permissions are self explanatory for the administrators. Test these permissions in the lab environment; upon successfull testing, apply for the production exchange servers.

Regards,
Raghavendra
raghavendra2512System AdministratorCommented:
Refer the below URL for More Granular level of Permissions:

http://blogs.technet.com/b/exchange/archive/2006/11/03/3396144.aspx
GSLElectricAuthor Commented:
Mark Bill, why did you opt to not do this?
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.