I didn't want to guess (none of my customers restrict Exchange admins), so I went to someone who would know for sure:
It would just need to be on the Admin group. The org level permissions are only needed for the FIRST install of Exchange, any subsequent server installs, service pack applications, hotfixes, etc those perms would just need to be on the Admin group. Steve Antonio , MCSE, MCSA Microsoft Enterprise Messaging Support Exchange Escalation Services -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Wednesday, December 08, 2004 2:32 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 2k permissions OT the first article was great. just one question- he talks about needing to be exchange full admin on the org to install or upgrade a server in exchange 2k. do you know if this means you need to be a full admin on the org to install a exchange service pack as well? or just the admin group? thanks -----Original Message----- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 10:04 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 2k permissions OT There are two permissions papers now. Working With Active Directory Permissions in Exchange Server 2003 http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/ex2k3 ad.mspx Working with Store Permissions in Exchange 2000 Server and Exchange Server 2003 http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/storp erm.mspx They _should_ contain everything the 2000 paper does, plus quite a bit more. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob Sent: Wednesday, December 08, 2004 12:10 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 2k permissions OT www.venkat.btinternet.co.uk/exchange/Permissions.doc Microsoft(r) Exchange 2000 Internals: Permissions Guide Paul Bowden, Program Manager, Microsoft Exchange Server Product Unit Little old but it covers E2K with a lot of "What permissions do I need to do * " Q&A -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Tuesday, December 07, 2004 7:16 PM To: ActiveDir (E-mail) Subject: [ActiveDir] exchange 2k permissions OT Anyone know of a good doc on permissions for administering exchange 2k? i already read the "exchange store permissions" MS whitepaper but I'm looking for Admin permisions like "do yo have to be a full admin on the org to create a server in an admin group?" Or what permissions are needed to create a recipient policy. Currently, I have full exchange rights on my admin group and view only admin on the org. Yet with these rights, I can't install a new exchange server in my group or run a mailbox manager policy. In fact, odly enough, I can create a recipient policy but can't delete it??!! This even applies when i put myself into the Exchange domain servers global group. I'm looking to make the case to have full admin rights on the org and i'd like a list or article to point out what you can do as full admin on an admin group vs. full admin on the org. MS seems pretty vague on this stuff. and it seems to me that in exchange its not like ntfs where you can have full control on a file but read only on the parent folder and still do what you want to the file. In fact exchange doesn't seem to have much logic to itin terms of rights. i'd like to make a case for full admin rights as something i'd need to do my job and be able to back it up with some docs since just full admin on a admin group doesn't seem to allow that much. thanks List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
