Hello, I believe I may be having an issue with removing the Manage Full-Access permissions for users that manage mailboxes. I created a new role group in Exchange 2010 SP2 and assigned the group the following roles: Distribution Group, Mail Enabled Public Folders, Mail Recipient Creation and Mail Recipients. When I add the Mail Recipients role the user is allowed the manage the mailboxes which is fine but the user also get's the Manage Full-Access Permissions to add/remove themselves or other users from mailboxes. Is there a way or role that can be added to allow the user to manage the mailbox but not the full-access permissions? Thank you, Ryan

You are correct, the recipient managment role does have rights to manage mailbox perms for some reason I thought it didnt.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com