Hi all,I would to delegate helpdesk to create user account, mailbox, group of member with minimum access right.Any guide and definition for that?thanks for help.

Delegate the helpdesk group "Recipient admin" permission in Exchange. http://technet.microsoft.com/en-us/library/bb310792.aspx Also delegeta them permission in AD to create/delete users and groups.

Hi Lasse Pettersson,Thanks for your information,sorry about not provie the os environment,The AD is using Windows Server 2003 enterprise edition & MS Exchange Server 2003 enterprise edition .I found the delegation, from exch manager, that is 3 type of access right, that is full access, Exchange Adminstrator and Exchange view only, ( if i grant the helpdesk exchange administrator right, it look he can do more than create/delete mailbox, i would like to avoid helpdesk to that)I heard that, we can using AD Delegation of Control Wizard and select custom task to minimize the right for create/delete user account,mailbox,grant members of.But inside the Custom task there is alot of selection, i really blur to select which option to minimize the right to meet the above requirement.thanks for helps.

Here is a link with much information about AD permissions required for different tasks in Exchange. http://technet.microsoft.com/en-us/library/bb124223.aspx

HI Lasse Pettersoon,i found the solution alreadyi just delegate Create, delete and manage user accounts, reset user passwords and force password change at next logon, rea all user information, modify the membershipt of group and at exchange manager grant Exchange View only administrator rights is fullfil my senario.thanks.

Now i face another problem, which that is a vb script to add employee no in the nt account, and prompt error code, like below------------------------------------------------------------------------script c:\empno-id.vbsLine : 8Char : 1Error : General access denied errorerror code :80070005source Active Directory------------------------------------------------------------------------the script i copy from server to client pc.the script is like this----------------------------------------------------------------------Dim oemployeeIDDim oUser3 Dim temp3 Set oemployeeID = Wscript.Arguments Set oUser3 = GetObject(oemployeeID(0)) temp3 = InputBox("Employee-ID: " & oUser3.employeeID & vbCRLF & vbCRLF & "If you would like enter a new number or modify the existing number, enter the new number in the textbox below") if temp3 <> "" then oUser3.Put "employeeID",temp3 oUser3.SetInfo Set oUser3 = NothingSet oemployeeID = NothingSet temp3 = Nothing WScript.Quit