Exchange Server Forums

Delegate Admin Permissions?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Management >> Delegate Admin Permissions?

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Delegate Admin Permissions? - 31.Jul.2008 3:45:22 PM

mbrinkho

Posts: 5
Joined: 31.Jul.2008
Status: offline

Our organization has recently switched over to Exchange/Outlook 2007. Unfortunatley our admins aren't very experienced and our central helpdesk is doing a terrible job of providing support to our individual departments. Each department has their own IT staff and it would be very helpful if we could give those staff some administrative privileges so that they would be able to support their users more efficiently but the main Exchange admin says it's not possible to do this without giving admin access to the entire domain.

My question then is whether it is possible to delegate some Exchange administrative priviliges over a single OU to a few users - that way they could take care of their users but not have admin rights in other OUs. (We do have admin access in the Active Directory and that helps but we would like to have acceess to create mailboxes, etc. under our OU.)

I have looked through the Exchange documentation on Microsoft's site and I'm having a hard time making sense of it. Thanks in advance for any guidance you can provide in this area - even if it's "you can't do that."

Post #: 1

Featured Links*

RE: Delegate Admin Permissions? - 31.Jul.2008 3:52:42 PM

John Weber

Posts: 588
Joined: 20.Apr.2005
From: Portland, Oregon
Status: offline

You CAN do that. Look up split Permissions Model Reference.

On a more basic level, you

create a group for the local container admins.
add user objects.
repeat as necessary per container
delegate AD authority for the requisite group to the container (document this action thoroughly! [or you will be sorry])
assign the delegated group the proper Exchange permissions at the org level.
install x86 management tools to the delegated group/users workstations or arrange for them to use RDP to a server (recommend the local method vice the rdp method)