I'm about to configure permissions in the Exchange 2007 EMS and have found twocommands that may do the same thing (or maybe one isright and one is wrong).Not wanting to mess this up, I'm going tosee if someone can verify that both of these commands are correct (and would produce identical results).The objective is to grant a certain user (BESADMIN - this is for BES) the rights indicatedin the commands:Command 1get-mailboxserver <mail_server_name> | add-adpermission user BESAdmin accessrights GenericRead, GenericWrite, ExtendedRight extendedrights Send-As, Receive-As, ms-Exch-Store-AdminCommand 2set-mailboxserver "<mailservername>" | add-permission -user BESAdmin -accessrights ExtendedRight -extendedrights Send-As,Receive-As,ms-Ex-Store-AdminIn the 1st command, the generic rights are listed but in the second I see just "ExtendedRight" and the commands moves on to the particular extended rights (Send-As, etc.).Also, if I am at the mailserver, and if there is only one mailserver in the organization, could I simply start the command with add-permission (etc.) possibly indicating for the -user parameter that the account is a domain account: "mydomain\BESAdmin"

Yes, first cmdlet will give Generic Read/Write along with Extended rights while second just Extended. Yes you can start with Add-AdPermission if you have just one server but in that case you need to givedistinguished nameof your Exchange server... Add-ADPermission "CN=<ExchangeServerName>,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=<ExchangeOrgName>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<Domain>,DC=com" -access.....Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com