Announcement

Collapse
No announcement yet.

what permission should exchange domain server's group have on active directory?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • what permission should exchange domain server's group have on active directory?

    i have noticed that exchange domain servers group have full control permission on the active directory, is that normal?
    and what the default members of the exchange domain servers group should be?
    thanx for help

  • #2
    Re: what permission should exchange domain server's group have on active directory?

    Let me ask you this - do you have any reason to believe that is not normal?

    Exchange is very closely tied to AD and does a lot of things with AD directly.

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: what permission should exchange domain server's group have on active directory?

      My reason is there is two users belong to this group, so these users have also full control to the active directory.
      these two users have full administrator permission delegated to them for exchange, and also they are members of local administrators group in exchange server.
      so i wonder if they should also be members of this group.

      Comment


      • #4
        Re: what permission should exchange domain server's group have on active directory?

        You have users in the group "Exchange Domain Servers"?
        That isn't correct. That group should contain the Exchange servers only - no users.
        If there are users in that group then they should be removed.

        Simon.
        --
        Simon Butler
        Exchange MVP

        Blog: http://blog.sembee.co.uk/
        More Exchange Content: http://exchange.sembee.info/
        Exchange Resources List: http://exbpa.com/
        In the UK? Hire me: http://www.sembee.co.uk/

        Sembee is a registered trademark, used here with permission.

        Comment


        • #5
          Re: what permission should exchange domain server's group have on active directory?

          Ok, thanks alot.
          i'v got what i want to know.
          thanks again

          Comment

          Working...
          X