Is it possible to enable the Exchange Advanced, Exchange General, Exchange Features andE-Mail Addresses tabs in the ADUC tool while limiting users rights to chage attributes or create objects? We have many "low level admins" who use the tool to view user account attrributes (such as distr list and security group membership) who need to be able to see users send and receive limits and mailbox rights. These admins are curently limited view only attributes unless they have been give specific rights to distro or SGs. Believe we are using ES 2003.

I'm not entirely sure what you are asking here, but The Exchange tabs are visible once you install the Exchange management tools. Any user (by default) will be able to view the Exchange properties using those tabs. In order to change any properties you need to be delegated control like you would for normal user management. If you need to seperate Exchange property management from other user-related tasks you can implement a split permissioning model: http://technet.microsoft.com/en-us/library/bb232100.aspx Cheers, Mark

Thanks Mark, Our lowest level admins have the ADUC tool. The way it was configured and deployed it was minus the 4 exchangetabs. We've been told that it was done like that because they could not deliver that capability with view only permissions. Our low level admins need to be able to view certain exchange attributes such as send and receive limits and mailbox permissions but do not need rights to create or modify objects.I'm looking for something to go back to the contractor that says the capability we want is possible. The library article provided applies to Exch Svr 2007 I believe they are still using svr 2003. Do these same rules apply?

Those 4 Exchange tabs will only appear if the Exchange Management Console has been installed on the same computer as ADUC is being run from. Are you sure that is not the reason why the tabs don't appear for the low-level admins? Depending on your permissioning model, non-Administrative user accounts can normally read those AD attributes which contain Exchange-related information, but not edit the values. Also, Exchange 2007 no longer includes any ADUC-integration; all Exchange-related management is performed from the separate Management console and shell.

It is possible to get these tabs in ADUC if you are using Exchange 2003 without installing the full Exchange System Manager. As the other posters responded, the ADUC extensions should only be used with Exchange 2000/2003, not Exchange 2007. I blogged about this a while back, if you are interseted, here is the link: http://mostlyexchange.blogspot.com/2006/03/managing-mailboxes-in-aduc-without.html