Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I would like to allow someone else to administer user accounts and mailboxes (add users, reset passwords, disable accounts) on an Exchange 2007 server.

Obviously, they should not be able to disable or alter the administrator accounts or make any other type of changes to the server.

Please advise what is the minimum security permissions I should grant them so they can perform these functions alone.

share|improve this question
add comment

2 Answers

I'm no exchange pro, but I think you'll find that you'll need to perform most of these functions in Active Directory, not in Exchange. Changing a password is something you do in AD. While you can add mailboxes and suspend mailboxes in Exchange separate from the AD user's windows account, it's really something you should be doing in AD User Management so the settings apply to all MS services.

Have a look at the permissions of the Domain Admins or similar groups, and see if you can replicate some of the AD rights that you need in a new group.

share|improve this answer
add comment

I decided to install www.websitepanel.net and use it for administration purposes which provides a Web interface the achieves my objectives of only giving access to the add / edit / remove mailboxes and users options while removing all root access to the server directly.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.