| Author |
Message |
SilverICE
Guest
|
 Posted:
Wed Dec 28, 2005 5:58 pm Post subject:
Delegate Control? |
|
|
I have two Routing Groups in my Exchange Organization. I am responsible for
the servers at the home office in RG1, and want to delegate control to
another admin in a branch office that is in RG2 so they he only has
permissions to his RG.
What is the best way to accomplish this?
|
|
| Back to top |
|
 |
Bharat Suneja
Guest
|
| Posted:
Thu Dec 29, 2005 12:59 am Post subject:
Re: Delegate Control? |
|
|
Routing Groups are not an administrative boundary. Administrative Groups
are.
To install servers in a new Administrative Group, you need to create the
Administrative Group before you start Exchange setup for the (new)
server(s). Once installed, you cannot move a server across Administrative
Groups even in a Native Mode org.
(http://www.windowsitpro.com/Article/ArticleID/42038/42038.html)
You would need to install a new server in a new Administrative Group, move
mailboxes, then delegate administration of the new Admin. Group to the other
admin or preferably a security group (and make the admin a member).
(You can uninstall and remove the old server(s), or reinstall Exchange and
make the server(s) member of the new Admin Group and move stuff back... If
you do decide to do this, do not forget to follow the move server guidelines
before removing first server from admin group - kba 822931 documents this).
--
Bharat Suneja
MCSE, MCT
www.zenprise.com
blog: www.suneja.com/blog
-----------------------------------------
"SilverICE" <SilverICE@discussions.microsoft.com> wrote in message
news:6B17CBCB-698D-4796-93A5-9FEE102A6C34@microsoft.com...
| Quote: | I have two Routing Groups in my Exchange Organization. I am responsible
for
the servers at the home office in RG1, and want to delegate control to
another admin in a branch office that is in RG2 so they he only has
permissions to his RG.
What is the best way to accomplish this? |
|
|
| Back to top |
|
|
Jonathan Norris
Guest
|
| Posted:
Thu Dec 29, 2005 1:58 am Post subject:
Re: Delegate Control? |
|
|
You could also try to delegate control on the servers themselves. Assuming
their users are on seperate servers.
It does depend what they will need to do with their users and servers.
--
Jonathan
No Warrenties Implied, Did you do a FULL backup today??????
"Bharat Suneja" wrote:
| Quote: | Routing Groups are not an administrative boundary. Administrative Groups
are.
To install servers in a new Administrative Group, you need to create the
Administrative Group before you start Exchange setup for the (new)
server(s). Once installed, you cannot move a server across Administrative
Groups even in a Native Mode org.
(http://www.windowsitpro.com/Article/ArticleID/42038/42038.html)
You would need to install a new server in a new Administrative Group, move
mailboxes, then delegate administration of the new Admin. Group to the other
admin or preferably a security group (and make the admin a member).
(You can uninstall and remove the old server(s), or reinstall Exchange and
make the server(s) member of the new Admin Group and move stuff back... If
you do decide to do this, do not forget to follow the move server guidelines
before removing first server from admin group - kba 822931 documents this).
--
Bharat Suneja
MCSE, MCT
www.zenprise.com
blog: www.suneja.com/blog
-----------------------------------------
"SilverICE" <SilverICE@discussions.microsoft.com> wrote in message
news:6B17CBCB-698D-4796-93A5-9FEE102A6C34@microsoft.com...
I have two Routing Groups in my Exchange Organization. I am responsible
for
the servers at the home office in RG1, and want to delegate control to
another admin in a branch office that is in RG2 so they he only has
permissions to his RG.
What is the best way to accomplish this?
|
|
|
| Back to top |
|
|
SilverICE
Guest
|
| Posted:
Thu Dec 29, 2005 1:58 am Post subject:
Re: Delegate Control? |
|
|
So what do people do who are just running a single Admin Group, single
Routing Group, Exchange Organization that contained several different
servers? Can they not lock down permissions so that one admin could only
have control of one server? i.e. not give one admin keys to the kingdom?
"Bharat Suneja" wrote:
| Quote: | Routing Groups are not an administrative boundary. Administrative Groups
are.
To install servers in a new Administrative Group, you need to create the
Administrative Group before you start Exchange setup for the (new)
server(s). Once installed, you cannot move a server across Administrative
Groups even in a Native Mode org.
(http://www.windowsitpro.com/Article/ArticleID/42038/42038.html)
You would need to install a new server in a new Administrative Group, move
mailboxes, then delegate administration of the new Admin. Group to the other
admin or preferably a security group (and make the admin a member).
(You can uninstall and remove the old server(s), or reinstall Exchange and
make the server(s) member of the new Admin Group and move stuff back... If
you do decide to do this, do not forget to follow the move server guidelines
before removing first server from admin group - kba 822931 documents this).
--
Bharat Suneja
MCSE, MCT
www.zenprise.com
blog: www.suneja.com/blog
-----------------------------------------
"SilverICE" <SilverICE@discussions.microsoft.com> wrote in message
news:6B17CBCB-698D-4796-93A5-9FEE102A6C34@microsoft.com...
I have two Routing Groups in my Exchange Organization. I am responsible
for
the servers at the home office in RG1, and want to delegate control to
another admin in a branch office that is in RG2 so they he only has
permissions to his RG.
What is the best way to accomplish this?
|
|
|
| Back to top |
|
|
Bharat Suneja
Guest
|
| Posted:
Thu Dec 29, 2005 1:58 am Post subject:
Re: Delegate Control? |
|
|
Permissions assigned on an Exchange Server object itself (by going to ESM |
ServerName | Properties | Security) by themselves are not sufficient -
depending on what you want to delegate. Do you want them to manage
Recipients, Stores/Storage Groups, local computer, et al?
http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3AdminGuide/164e3692-0419-44b3-b312-93fc24163e96.mspx
It's a combination of local computer privileges (member of local admins
group), AD permissions (do the users in that location/having mailboxes on
those servers reside in particular OU?), AdminGroup permissions (at least
View Only Admin permission on the admin group), etc.
You can lock down each as granularly as you want.
With admin groups the delegation is much simpler and cleaner.
--
Bharat Suneja
MCSE, MCT
www.zenprise.com
blog: www.suneja.com/blog
-----------------------------------------
"SilverICE" <SilverICE@discussions.microsoft.com> wrote in message
news:6476DE1C-7654-4333-8104-6BCA75675D6D@microsoft.com...
| Quote: | So what do people do who are just running a single Admin Group, single
Routing Group, Exchange Organization that contained several different
servers? Can they not lock down permissions so that one admin could only
have control of one server? i.e. not give one admin keys to the kingdom?
"Bharat Suneja" wrote:
Routing Groups are not an administrative boundary. Administrative Groups
are.
To install servers in a new Administrative Group, you need to create the
Administrative Group before you start Exchange setup for the (new)
server(s). Once installed, you cannot move a server across Administrative
Groups even in a Native Mode org.
(http://www.windowsitpro.com/Article/ArticleID/42038/42038.html)
You would need to install a new server in a new Administrative Group,
move
mailboxes, then delegate administration of the new Admin. Group to the
other
admin or preferably a security group (and make the admin a member).
(You can uninstall and remove the old server(s), or reinstall Exchange
and
make the server(s) member of the new Admin Group and move stuff back...
If
you do decide to do this, do not forget to follow the move server
guidelines
before removing first server from admin group - kba 822931 documents
this).
--
Bharat Suneja
MCSE, MCT
www.zenprise.com
blog: www.suneja.com/blog
-----------------------------------------
"SilverICE" <SilverICE@discussions.microsoft.com> wrote in message
news:6B17CBCB-698D-4796-93A5-9FEE102A6C34@microsoft.com...
I have two Routing Groups in my Exchange Organization. I am responsible
for
the servers at the home office in RG1, and want to delegate control to
another admin in a branch office that is in RG2 so they he only has
permissions to his RG.
What is the best way to accomplish this?
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in