You can get a lot of information as a normal user unless they have locked it down. I expect they haven't as that is something usually only done in better installations and I doubt the company would be kicking out the outsource partner if they were doing things well.
On top of that, try to get Exchange View. That gets you access to read all of the Exchange config info. As for not having an Admin ID. I can't believe the company's Security group even allowed that, that is insane. I would require the outsourcing company to fess up at least one admin ID or the password to the built-in administrator accounts immediately. The only way this wouldn't be correct is if the contract specified authentication and mail services and not that the outsourcing partner was running the company's AD and Exchange. I.E. When the outsourcing company goes away, so do all of the servers. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Friday, July 29, 2005 6:22 PM To: [email protected] Subject: [ActiveDir] Advice I'm starting a new job in a week as a AD/Exchange engineer(I posted about my anxieties before on the list). This company used to outsource all their AD/Exchange infrastructure and now they want to take control of it. As it stands, their relationship with the outsourcing firm is rocky. While the DC's and Exchange server are physically in the company, no one has Domain or Enterprise admin rights. And no one, including me, is about to attempt elevation of privilges with all the numerous ways to "hack" a DC when you have physical access. That would be in poor taste. My questions to the list are, if you were coming into such an enviorment, what are the first things you would do and look for? How much as a regular user can you glean of the AD/Exchange enviorment and what would be your first steps? Thanks very much. -------------------------- Sent from my BlackBerry Wireless Handheld (www.BlackBerry.net) List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
