Delegation Wizard
Is there a document on performing detailed delegation wrt Exchange 2007?
Lets take a basic example, I have 2 sets of recipient administrators
Set 1 Must be able to administer only Exchange/Mail related attributes and Users A B and C in OU XXX
Set 2 Must be able to administer Excahange/Mailb related attributes and Users D and E in OU YYY Set 2 must also be able to change the users description
In Exchange 2000/2003 this can be done, can it be done with Exchange 2007 and the New GUI?
August 12th, 2006 5:33pm
You can control permissions to this level of granularity by using the "permission" cmdlets (Get/Set-ADPermission in this case). The GUI delegation is only for the built-in delegated roles, which cover the most common delegation requirements.
Evan
Free Windows Admin Tool Kit Click here and download it now
August 13th, 2006 5:19am
Yep. Also,2003 did not have a built-in recipient role (only View-Only, AG Admin, Full Admin), so the only way this was possible was by doing custom permissioning using direct AD ACL'ing. Take a look at the up-to-date online help for the description of the improvements in 2007:
http://www.microsoft.com/technet/prodtechnol/exchange/E2k7Help/cb24ddb7-0659-4d9d-9057-52843f861ba8.mspx?mfr=true
As Evan said, if you need to go beyond the built-in roles, you can use the same custom permissioning techniques used in 2003 as essentially everything is still ACL based in 2007.
August 13th, 2006 6:42am
Agreed,
I am going to need to spend a whole bunch more time learning how to do this, (I actually prefer the CLI).
I just have many questions when it comes to upgrading where detailed roles have already been defined, let me read the documentation and play around before I comment if the 2007 delegation is better
Free Windows Admin Tool Kit Click here and download it now
August 13th, 2006 1:11pm
Is there a document that explains where to get started wrt exchange 2007 custom delegation,
I want to take a normal user and assign rights to that user that gives him progressive rights to exchange 2007
eg,
can I create a role that only allows someone to create and delete mailboxes only?
etc etc..
October 14th, 2007 4:02pm
I now have the answer, a new feature in exchange 2010.... looks like 2007 did not have this functionalityhttp://msexchangeteam.com/archive/2009/11/16/453222.aspx
Free Windows Admin Tool Kit Click here and download it now
January 12th, 2010 8:47pm