Welcome To My Blog

Wednesday, May 5, 2010

How to delegate Exchange Administrative Permission

To have a better Administration over the Exchange Organization, delegating Administrative permission is the best way.

The following shows the permissions options for Exchange administrator role.

Full Administrator Role - Full control over all objects within the hierarchy
Change all permissions, Delegate permissions and Read mailboxes

Administrator - Full control over all objects, except cannot change permissions

View Only Administrator – To view the configuration

Using permissions you can delegate Exchange server administrative tasks to other users. Keep in mind the following facts for managing Exchange permissions:

  • Permissions are assigned either at the organizational level or the administrative group level.
  • Use the Exchange Delegation Wizard in Exchange System Manager to manage delegations.
  • While running /forestprep or during the Exchange Server 2003 installation, you identify the default Exchange System Administrator. This administrator has all permissions to the Exchange organization.
  • Exchange administrators must have specific permissions in Active Directory for the objects and levels they will be working. They must also have permissions on the local computer.

Note: When you assign the Full Administrator or Administrator roles to an administrative group, the user also receives View Only permissions to the organization, allowing the administrator to view the configuration of the entire organization.

Step by step procedure to Delegate Administrative roles to particular users

Go to Start ->All Programs -> Microsoft Exchange ->System Manager ->right click the Organization Name and select delegate control

clip_image002

On the welcome page click next to continue

clip_image004

We can add the user or groups to grant administrative permission, Click add to find the user to be granted administrator permission over the exchange organization

clip_image006

On the delegate control window, click browse to find the user or group from AD

clip_image008

Select a user to grand permission

clip_image010

Select the required permission what you planned to grant and click ok to continue

clip_image012

After assigning particular permission, review the permission and click next

clip_image014

On the warning page click ok to continue. Make sure you are following the warning

clip_image016

On the last page click finish to end the delegation

clip_image018

No comments:

Post a Comment