HelloWe are running Exchange 2003 and shortly moving to Exchange 2007.Our Helpdesk have a security group, #Helpdesk, who have rights on the Users OU in AD and also view-only rights on our Exchange 2003 Administrative Group. This allows them to create AD mail-enabled accounts, make changes to the AD account (e.g. amend email address, add secondary address etc).I'm confused about what we need to do when we move mailboxes to Exchange 2007. Do we need to assign the #Helpdesk group the Exchange Recipient Admins permissions? What will this achieve that they can't do already since they have permissions on the Users OU where users' AD accounts are held?Are there any specific Exchange attributes they won't be able to change once the mailboxes have been moved to 2007 mailbox servers?Thanks guys.

Exchange 2007 has split roles compared to Ex2003.You cans still delegate the same role to Helpdesk via OU and allow them create MBX's See below Permission Considerations Exchange 2007 Permissions and Roles (Part 1) HOW TO: Delegate recipient administration for an OU Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

"You cans still delegate the same role to Helpdesk via OU and allow them create MBX's"Sorry, do you mean CAN or CAN'T?

you can.Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Thanks, so there's no need to add #Helpdesk as Recipient Admins?

You will have to add them. See the Articles which i have providedVinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Hi Joe,From an article "HOW TO: Delegate recipient administration for an OU" given by Vinod, The delegation wizard in the EMC allows you to delegate the Recipient Administrator role for the entire Organization.If you want to give your Helpdesk group the right on OU level,you only need to run the script(ConfigureSplitPerms.ps1) as article lists if you run Exchange 2007 SP1 or later. Frank Wang