Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I determine if a given Exchange 2010 management role assignment is built-in (i.e., installed with Exchange) or not?

The best I've come up with so far is going off the WhenCreated attribute, but that's hardly authoritative.

share|improve this question
Compare them to the defaults? -… – joeqwerty Oct 24 '13 at 18:57
@joeqwerty, see my comment on the below answer. – Tohuw Oct 24 '13 at 18:59
up vote 1 down vote accepted


You'll need to drill down on Technet here:

Click on the particular role and then expand the "Default Management Role Assignments".

That will give you the defaults that are included in a particular role.

share|improve this answer
Thanks for the concise list; it saves some time. I was hoping to figure out an authoritative way via Shell to automate an auditing process, but it looks like I'll just have to build a list myself from what you linked. Cheers. – Tohuw Oct 24 '13 at 18:59
yeah, I don't recall it ever showing "built-in" vs. user-add in the GUI or the shell. – TheCleaner Oct 24 '13 at 19:01
@TheCleaner correct. internally, there is no difference. think of them less as "built-in" and more as "defaults provided". – longneck Oct 24 '13 at 20:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.