asked on

exchange 2010 RABC quastion

Hi Experts

i want to give our help desk team some permissions on our exchange management console

to make some change on our users mailboxes

but i don't want them to have manage full access option

i took a look at RABC and i found something will help please check the attached file

i know about RABC Manager v2 but i don't know how to use it in other words i am afraid to use it

so how can i give the users ability to change mailbox properties but with give ability to use manage full access

please check the attached files and advice me
1.jpg
2.jpg
3.jpg

Hemil Aquino

Tell me what type of permission you want to give to your team thus I can guide you step by step.

viktor grant

Hi,

I was checking your questions. There are links very useful:

http://www.itprotoday.com/blog/rbac-manager-exchange-role-based-access-control

http://techgenix.com/exchange-2010-role-based-access-control-part1/

https://rbac.codeplex.com/

Cheers

sword12

ASKER

Hi Hemil Aquino

i would like to thank you for your offer

please check the attached file

you will find exactly what i need

thanks you in advance
RABC-and-delegation.docx

sword12

ASKER

Hi Hemil Aquino

i read about RABC manager

and i created new Management Role based on the default created “Mail Recipients (( please check the attached file

but when i try to modify this new Role the changes dose not take effects

do i have to make these change via command line ? to take effects

please check the attached file and update me
4.jpg

sword12

ASKER

Hi Hemil Aquino

sorry but i found the solution

check the attached file

sorry it was my mistake
5.jpg

Hemil Aquino

Sorry for the delay dude, I just saw my computer.
You are on the right track, all you need to do it's assign the user such privileges.

sword12

ASKER

it is OK now it works very well

thank a lot

but can i ask you another question

do you know any nice way or free tool to audit

all exchange and AD changes

i need auditing tools to monitor the changes on AD and exchange . from our help desk team and everyone has permissions to AD and exchange management console

thnaks

ASKER CERTIFIED SOLUTION

Hemil Aquino

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sword12

ASKER

thnaks a lot

i found something like this i will test it tomorrow

http://www.paramountdefenses.com/free-active-directory-audit-tool.html

yes sure i know about Manageengine but it cost

anyway if we have to buy it we will think about it

thnak you so much for your quick respond

Hemil Aquino

Sure man, anytime. Let me know how's everything goes.