locked
What permission required to renew self-signed certificate in exchange 2007 RRS feed

  • Question

  • hi

    I would like to renew the self-signed in my exchange 2007 environment.

    Please let me know what permission required renewing the certificate.

    waiting for reply

     

    Wednesday, August 11, 2010 5:43 AM

Answers

  • Hi,

    You can renew certificate with permission Exchange Server Administrators on server where you want to do it. The Exchange Administrator role is essentially the same as the Exchange Full Administrator role although this role does not give the ability to grant permissions to other Exchange administrators

    I will advise you to go ahead with below detail for more detail about Exchange 2007 permission model

    http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/exchange-2007-permissions-and-roles-part1.html

     


    Anil
    • Proposed as answer by Anil K Singh Thursday, August 12, 2010 10:31 AM
    • Marked as answer by Xiu Zhang Friday, August 20, 2010 9:27 AM
    Wednesday, August 11, 2010 1:28 PM
  • Hi,

    I think the permission could be the same when you run new-exchangecertificate:

    To run the New-ExchangeCertificate cmdlet, the account you use must be delegated the following:

    • Exchange Server Administrator role and local Administrators group for the target server

    To run the New-ExchangeCertificate cmdlet on a computer that has the Edge Transport server role installed, you must log on by using an account that is a member of the local Administrators group on that computer.

    Regards,

    Xiu

    • Proposed as answer by Anil K Singh Thursday, August 12, 2010 10:31 AM
    • Marked as answer by Xiu Zhang Friday, August 20, 2010 9:27 AM
    Thursday, August 12, 2010 7:37 AM

All replies

  • Hi,

    You can renew certificate with permission Exchange Server Administrators on server where you want to do it. The Exchange Administrator role is essentially the same as the Exchange Full Administrator role although this role does not give the ability to grant permissions to other Exchange administrators

    I will advise you to go ahead with below detail for more detail about Exchange 2007 permission model

    http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/exchange-2007-permissions-and-roles-part1.html

     


    Anil
    • Proposed as answer by Anil K Singh Thursday, August 12, 2010 10:31 AM
    • Marked as answer by Xiu Zhang Friday, August 20, 2010 9:27 AM
    Wednesday, August 11, 2010 1:28 PM
  • Hi,

    I think the permission could be the same when you run new-exchangecertificate:

    To run the New-ExchangeCertificate cmdlet, the account you use must be delegated the following:

    • Exchange Server Administrator role and local Administrators group for the target server

    To run the New-ExchangeCertificate cmdlet on a computer that has the Edge Transport server role installed, you must log on by using an account that is a member of the local Administrators group on that computer.

    Regards,

    Xiu

    • Proposed as answer by Anil K Singh Thursday, August 12, 2010 10:31 AM
    • Marked as answer by Xiu Zhang Friday, August 20, 2010 9:27 AM
    Thursday, August 12, 2010 7:37 AM