Domain Admin and Exchange Admin Group

From: Olsen (anonymous_at_discussions.microsoft.com)
Date: 10/05/04 

Date: Tue, 5 Oct 2004 02:13:13 -0700

One member of our security team has requested to be made a
member of the Domain Admins and Exchange Admins group. I
see this as being a risk with his past experiences.

How can I give him rights to create domain user and
exchange mailboxes without giving him rights to the groups
above.

I know you feel for me when I say I can live with giving
him access to create accounts but not actually being able
to restart a server or look at someone elses email.

Any assistance is appreciated....

Relevant Pages

  • Re: no Domain Admin rights to a Domain Server
    ... If the computer is still a member of the domain with proper DNS name ... the domain it needs to be joined to the domain again and the domain admins ... I can logon locally to the machine but the rights are that of a ... the server belongs to engineering and the person in charge ...
    (microsoft.public.win2000.security)
  • Domain and Exchange Admins Group
    ... member of the Domain Admins and Exchange Admins group. ... exchange mailboxes without giving him rights to the groups ...
    (microsoft.public.win2000.security)
  • Printing Issue
    ... Under the security tab I gave a few users full rights ... I made one of them a member of Domain Admins and they were able to print ...
    (microsoft.public.windows.server.networking)
  • Re: Domain and Exchange Admins Group
    ... You may delegate control of specific taskto specific user. ... specific user needs appropriate rights and click ... > member of the Domain Admins and Exchange Admins group. ...
    (microsoft.public.win2000.security)
  • RE: Domain Admin and Exchange Admin Group
    ... >> member of the Domain Admins and Exchange Admins group. ... >> exchange mailboxes without giving him rights to the ... >right klik and klik on delegate controle ...
    (microsoft.public.security)