none
Split permission Exchange 2007 SP2. RRS feed

  • Question

  • Hi,

    I would like to give delegation to our helpdesk, to give "Send As" permission on different mailboxes as per request.

    we have Exchange 2007 SP2 on CCR cluster.

    Any help is highly appreciated.

     

    wasay.

     


    wasay13
    Saturday, August 6, 2011 12:59 PM

All replies

  • http://technet.microsoft.com/en-us/library/aa998291(EXCHG.80).aspx

     

    Permissions Required:

    Exchange View Only Administrator or higher and Account Operator or higher

    Note that Send as are AD perms. So with account operator perms, the helpdesk could grant SEND AS using ADUC and never need access to the Exchange MGMT tools.

     

    • Proposed as answer by emma.yoyo Monday, August 8, 2011 7:27 AM
    Saturday, August 6, 2011 2:17 PM
    Moderator
  • Hi wasay13,

    Any updates?

    Frank Wang

    Forum Support

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, August 8, 2011 7:26 AM
  • Hi,

    Andy, We don't prefer to give Account Operator permission to helpdesk if any granuler way of delegating let me know and will like to help desk to use Exchange mgmt to assign send as(optional).

    Thankx

    wasay


    wasay13
    Monday, August 8, 2011 11:28 AM
  • Hi wasay13,

    Please try this way: What permissions do I need to modify the mailbox permissions of a user object?

    1,  Exchange View-Only Administrator role
    2,  Administer Information Store permission granted on the mailbox store where the mailbox resides
    3,  Write permission granted on the user account to modify the permissions.

    Exchange 2007 Permissions: Frequently Asked Questions

    Details:

    1, add Helpdesk to either Exchange View-Only Administrator or Exchange Recipient Only Admin group.

    2, The permission Administer Information Store can be granted at Organization level, or database level:

    Add-ADPermission -Identity "Distinguished Name of Exchange Organization" -User "Domain\helpdesk" -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin -InheritanceType All

    3,  A.   Open ADUC.
         B.   Ensure that you have enabled Advanced Features by selecting View > Advanced Features.
         C.   Right Click on ad.umd.edu and select properties.
         D.   Select Security Tab and select Advanced button.
         E.   Click on Add button.
         F.   Type the name of the Admin account or Admin group to which you want to grant permission to modify the permission and click on OK.
         G.   Grant Modify Permissions and Read permissions to this admin account or admin group and apply the permission settings.

    Frank Wang

    Forum Support

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    Tuesday, August 9, 2011 6:32 AM
  • Hi Frank,

    Giving permission on "store" will give the previlege to dismount the databases.

    thanks

    wasay


    wasay13
    Tuesday, August 9, 2011 7:48 AM