Where can I find/edit rights issued by "Delegated Control..."

[Guest]

Members of a certain group can view other users mailboxes. I, Domain Admin en
Exchange Admin, can not. Probably these rights are given by Delegated
Control, but where can I find the delegated rights and more important
where/how can I change these rights?

 

[strongline]

Members of a certain group can view other users mailboxes. I, Domain Admin en
Exchange Admin, can not. Probably these rights are given by Delegated
Control, but where can I find the delegated rights and more important
where/how can I change these rights?

That will be very difficult, often delegation involves whole bunch of
permissions as well as, sometimes, user rights. So best practices of
delegating is delegating to a group that way you don't have to change
permissions individually when you want to "un-delegate" someone - you
just simply remove that person out of the group.

 

[Guest]

That will be very difficult, often delegation involves whole bunch of
permissions as well as, sometimes, user rights. So best practices of
delegating is delegating to a group that way you don't have to change
permissions individually when you want to "un-delegate" someone - you
just simply remove that person out of the group.

I know that the delegation is given to a group, but I want to know is what
kind of delegation is given and how do I change this delegation for this
group?

 

[Joe Richards [MVP]]

Go to a machine that has the exchange toolset loaded on it and open the
exchange rights tab of one of the user's in question and look at the
permissions.. Those are all of the folks that have some level of control
on the mailbox. The explicit permissions can be cleared from there. If
there are inherited permissions you will have to go to the config
container and into the Exchange part of the directory and clear them
from there.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm