Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Delegating permissions in Exchange 2003

Status
Not open for further replies.

woter324

Technical User
Jan 26, 2007
179
GB
Hi,

We have an AD security group named Role-ExchangeMailboxAdmin. This role should be able to move mail boxes from one mailbox to another without being able to do much else.

In short:
Set permissions on SELF group of Role-ExchangeMailboxAdmin
Delegated Role-ExchangeMailboxAdmin in ESM under Administrative Groups.
recieve: "Unable to create the required MAPI profile" error.

I have found MS KB 842033 article that is close to step-by-step but I don't want to apply to a user or OU, but a group. So following this KB, I have applied the permissions to the SELF group under the security tab for the security group with the following permissions:

homeMDB (Exchange Mailbox Store)
homeMTA
msExchHomeServerName (Exchange Home Server)
targetAddress
msExchOmaAdminWirelessEnable

Source: [URL unfurl="true"]http://www.microsoft.com/download/en/confirmation.aspx?id=18442[/url]

In ESM, under Administrative Groups, I have Delegated Control to this security group.

Testing, moving a mailbox, as a user who is a member of this Security group, I get the error:

Code:
Unable to create the required MAPI profile. Please verify that you have sufficient permissions to write to the MAPISVC.INF file

This move is 2003 only and source / target mailbox resides on the same server(native mode). We have a single domain.

I'm not sure if I am barking up the wrong tree completely or if I am close, but anyone who can let me in on the secret, I'd be very grateful.

Many thanks
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top