Tom, Bob, Deji will be covering Exchange security and how it relates to AD security at DEC 2005 in Vancouver.
-gil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob Sent: Tuesday, December 07, 2004 10:10 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 2k permissions OT www.venkat.btinternet.co.uk/exchange/Permissions.doc Microsoft(r) Exchange 2000 Internals: Permissions Guide Paul Bowden, Program Manager, Microsoft Exchange Server Product Unit Little old but it covers E2K with a lot of "What permissions do I need to do * " Q&A -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Tuesday, December 07, 2004 7:16 PM To: ActiveDir (E-mail) Subject: [ActiveDir] exchange 2k permissions OT Anyone know of a good doc on permissions for administering exchange 2k? i already read the "exchange store permissions" MS whitepaper but I'm looking for Admin permisions like "do yo have to be a full admin on the org to create a server in an admin group?" Or what permissions are needed to create a recipient policy. Currently, I have full exchange rights on my admin group and view only admin on the org. Yet with these rights, I can't install a new exchange server in my group or run a mailbox manager policy. In fact, odly enough, I can create a recipient policy but can't delete it??!! This even applies when i put myself into the Exchange domain servers global group. I'm looking to make the case to have full admin rights on the org and i'd like a list or article to point out what you can do as full admin on an admin group vs. full admin on the org. MS seems pretty vague on this stuff. and it seems to me that in exchange its not like ntfs where you can have full control on a file but read only on the parent folder and still do what you want to the file. In fact exchange doesn't seem to have much logic to itin terms of rights. i'd like to make a case for full admin rights as something i'd need to do my job and be able to back it up with some docs since just full admin on a admin group doesn't seem to allow that much. thanks List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
