delegate rights to create user,add group membership and mailbox in a particular OU
i want delegate rights to a group to create user,add group membership and mailbox in a particular OU,
How to do
March 26th, 2011 3:34pm
yes, but where is the problem? logon to Domaincontroller start Active Directory users and computers Go to the view Menu and check advanced mode.
Now you right click on the appropriate organisational unit and choose delgate control. After that you can show the porperties of this organisational unit and choose the security register card (advanced mode). Now you can check the delegated rights to the
specified usergroup.
regards Thomas Paetzold visit my blog on: http://sus42.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
March 26th, 2011 4:19pm
Bharat suneja msft has instructions on his blog.
HOW TO: Delegate recipient administration for an OU
http://exchangepedia.com/blog/2008/02/how-to-delegate-recipient.htmlJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
March 27th, 2011 8:59pm
Hi,
You could
create a new Exchange Recipient Management role by a parameter RecipientOrganizationalUnitScope .
Look at this example.
This example assigns the Mail Recipients role to the Contoso Sub - Seattle role group. The administrators in this
role group should only be allowed to create and manage mail recipients in specific databases that have been allocated for use by the Contoso subsidiary, A. Datum Corporation (adatum.com). Also, this group of administrators should only be allowed to manage
the Contoso employees that are located in the Seattle office. This is done by creating a role assignment with both a database scope, to limit management of mail recipients to only the databases in the database scope, and a recipient OU scope, to limit access
to only the recipient objects within the Contoso Seattle OU.
New-ManagementRoleAssignment -Name "Mail Recipients_Contoso Seattle" -Role "Mail Recipients" -SecurityGroup
"Contoso Sub - Seattle" -CustomConfigWriteScope "Contoso Databases" -RecipientOrganizationalUnitScope adatum.com/Contoso/Seattle/Users
More information about
New-ManagementRoleAssignment
http://technet.microsoft.com/en-us/library/dd335193.aspx
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the t
Free Windows Admin Tool Kit Click here and download it now
March 29th, 2011 10:28am