decentralized hell (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Server Security



Message


yourisd -> decentralized hell (21.Feb.2007 12:32:02 AM)

Hello,
We have a 15 site AD infrastructure.  Our helpdesk has Exchange Admin rights delegated to security group they reside in.  This does not allow them to do Exchange tasks outside of  our corporate OU's where they do not have admin rights.  I guess it is obvious that the AD sites permission override all permissions granted to Exchange Admins?  I do not want to give more access than is needed and I cannot get all of the sites to buy into an administrative account in their OU other than my Domain Admin account.  I do not want to continue doing this work.  Has anyone found a reasonable soluton to this type of issue?




Page: [1]