Announcement

Collapse
No announcement yet.

Exchange Permissions - Creating Mailboxes

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Exchange Permissions - Creating Mailboxes

    Hi All,

    As part our ongoing project to enhance security in our environment, we are now looking at Exchange Permissions... more specifically, creating mailboxes.

    Is it possible to grant permissions to a specific global group in AD that ONLY has access to create mailboxes and nothing more?

    So far we have managed to grant change permissions that allow the creation of mailboxes... but it also gives them change permissions to the actual information stores via MMC (allowing them to performance exchange tasks [like moving, deleting & purging] on mailboxes within those information stores).

    Any help on this would be greatly appreciated.

    Thank you.

  • #2
    Re: Exchange Permissions - Creating Mailboxes

    I am pretty sure it isn't possible to go down to that level on Exchange 2003. Exchange 2007 introduced more granual level of control over permissions that was missing from Exchange 2003.

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: Exchange Permissions - Creating Mailboxes

      How about this? http://windows.stanford.edu/w2kinfra.../e2kattrib.htm

      I am trying to achieve the same goal in Exchange 2003, although this list is for Exchange 2000 and I don't know if it will be different.

      Comment


      • #4
        Re: Exchange Permissions - Creating Mailboxes

        The differences will be negligible with Exchange 2003 as they are the same generation of product (v6).

        Whether it works or not is a different matter. It is one of the major selling points of Exchange 2007.

        Simon.
        --
        Simon Butler
        Exchange MVP

        Blog: http://blog.sembee.co.uk/
        More Exchange Content: http://exchange.sembee.info/
        Exchange Resources List: http://exbpa.com/
        In the UK? Hire me: http://www.sembee.co.uk/

        Sembee is a registered trademark, used here with permission.

        Comment


        • #5
          Re: Exchange Permissions - Creating Mailboxes

          Yeah I'll just have to test those settings with a dummy user. It's going to be a pain though if I have to keep adjusting permissions until I get the right ones, because of exchange cache.

          Exchange 2007 is a no go in my situation.

          EDIT***
          - I was just reviewing those permissions in more detail...would "msExchMailboxSecurityDescriptor" give the user the ability to make mailbox right/security changes?
          Last edited by ekrengel; 16th February 2010, 22:36.

          Comment

          Working...
          X