blackrabbit
IS-IT--Management
Here is the situation
Right now Domain Admins can go the properties of a user account, go to the Exchange Advanced Tab, Mailbox Rights and assign a user "full mailbox access". We do this when an employee has left the company, gernally to give that person's replacement/supervisor rights to open that users mailbox in outlook.
We have a group of lower level admins that need to be able to do this but I'm not sure what permissions in AD they need to do this.
Right now this lower level group of admins for this one OU has full control over user/computer/group object and can read/write all properties for these objects but just can't grabnt other users access to a users mailbox. Can someone point me in the reight direction to get this done?
One other thing, I've gone through the Exchange Delegation of control of view onl, admin, full admin as well and still no go. We're trying to let these lower level admins do a lot of stuff I can do as a domain admin without giving them full domain admin level access
Right now Domain Admins can go the properties of a user account, go to the Exchange Advanced Tab, Mailbox Rights and assign a user "full mailbox access". We do this when an employee has left the company, gernally to give that person's replacement/supervisor rights to open that users mailbox in outlook.
We have a group of lower level admins that need to be able to do this but I'm not sure what permissions in AD they need to do this.
Right now this lower level group of admins for this one OU has full control over user/computer/group object and can read/write all properties for these objects but just can't grabnt other users access to a users mailbox. Can someone point me in the reight direction to get this done?
One other thing, I've gone through the Exchange Delegation of control of view onl, admin, full admin as well and still no go. We're trying to let these lower level admins do a lot of stuff I can do as a domain admin without giving them full domain admin level access
