Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to allow someone else to administer user accounts and mailboxes (add users, reset passwords, disable accounts) on an Exchange 2007 server.

Obviously, they should not be able to disable or alter the administrator accounts or make any other type of changes to the server.

Please advise what is the minimum security permissions I should grant them so they can perform these functions alone.

share|improve this question

I'm no exchange pro, but I think you'll find that you'll need to perform most of these functions in Active Directory, not in Exchange. Changing a password is something you do in AD. While you can add mailboxes and suspend mailboxes in Exchange separate from the AD user's windows account, it's really something you should be doing in AD User Management so the settings apply to all MS services.

Have a look at the permissions of the Domain Admins or similar groups, and see if you can replicate some of the AD rights that you need in a new group.

share|improve this answer

I decided to install and use it for administration purposes which provides a Web interface the achieves my objectives of only giving access to the add / edit / remove mailboxes and users options while removing all root access to the server directly.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.