armstrongi
MIS
Hi,
We have just completed our Win2K/Exchange 2K migration. We are now ONE native mode active directory domain.
Looking for some guidance on the best way to limit Help Desk permissions yet still allow them to do their jobs. IE: Create and edit Active Directory, Exchange enabled user accounts.
We have currently given them access over the user OUs and also full mailbox access to the mailboxes which I feel is not acceptable since they can read email in all accounts. Exchange 5.5 had Permissions Admin which would allow you to give them just enough perm to do their job but not too much. Is there an equivalent in Win2k or a combination of policies/permissions that will allow this?
Thanks in advance for any links or help,
Jeff
We have just completed our Win2K/Exchange 2K migration. We are now ONE native mode active directory domain.
Looking for some guidance on the best way to limit Help Desk permissions yet still allow them to do their jobs. IE: Create and edit Active Directory, Exchange enabled user accounts.
We have currently given them access over the user OUs and also full mailbox access to the mailboxes which I feel is not acceptable since they can read email in all accounts. Exchange 5.5 had Permissions Admin which would allow you to give them just enough perm to do their job but not too much. Is there an equivalent in Win2k or a combination of policies/permissions that will allow this?
Thanks in advance for any links or help,
Jeff
