oh darn ... ended up that our domain local group which had nested global groups inside of it and which worked across a domain for our exchange view only permissions, stopped working when we went to Exchange 2003 ....
we made a new group and added them to the view only permissions ... works fine now ... Mike -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wohlgemuth, Mike Sent: Wednesday, June 16, 2004 2:55 PM To: Exchange Discussions Subject: Exchange 2003 delegate permissions We have a 2000 domain (sp4) and exchange 2003 sp1. Remote administrators in our schools are delegated permissions to fully manage their users. Previously, when we were running Exchange 2000, everything worked fine. They could add/delete users, mailboxes, smtp addresses, etc. After our upgrade, they are getting an error ONLY when they try to add an smtp address to a user ... Access is denied. Facility: Win 32 Id no:c0070005 Microsoft Active Directory - Exchange Extension We have read and followed http://support.microsoft.com/default.aspx?kbid=316792 and we removed and redelgated permissions, and even ran the dsacls utility ...no luck ... We have also looked at http://support.microsoft.com/default.aspx?kbid=815439 , but this article is for Exchange 2000 ... Additionally (and this may be the most important), if a domain admin is only granted "Exchange View Only Administrator" role, he gets the same error ... which suggests that in order to delegate this I need to tweak the security on Exchange System manager and allow an additional role... the question is which one? Any ideas? Thanks, Mike _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
