Nitin,

Thank you for your help!

- Do you know which object I need to look at in order to make these changes?

- Do you know of a white paper or a good book that could help me find the
correct object or objects that needs to be changed?

Thanks again for your help!

Christopher Gayle



"Nitin Shukla (MSFT)" wrote in message
news:O0fjJMtXEHA.2940@TK2MSFTNGP09.phx.gbl...
> You can use ADSIedit and navigate to the object on which you gave the
> individual "Exchange View Only Admin" and then look for that user and
> customize the permissions in a more granular fashion there.
>
> --
> Nitin Shukla
> Microsoft Support
>
> (nitinsh@online.microsoft.com)
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> "Christopher Gayle" wrote in message
> news:OT1FHxsXEHA.648@TK2MSFTNGP10.phx.gbl...
> > We granted a our Help Desk the "Exchange View Only Admin" right from the
> > Exchange 2003 System Manager - (Delegation of Control Wizard).
> >
> > I wanted to know if it was possible to customize the "Exchange View Only
> > Admin" ACL to:
> >
> > 1. Deny the Help Desk the ability to delete email accounts.
> >
> > 2. Deny the Help Desk the ability to modify the permissions on email
> > accounts.
> >
> > Thank you in advance for any and all help with this issue!
> >
> > Christopher Gayle
> > cgayle@iliant.com
> >
> >
>
>

Christopher - You can get more detail from the Exchange 2000 permissions
w/p. You can find that at,

http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/storperm.mspx

Now the object where you need to do this is the level at which you delegated
the permission - if you did it at the ORG level then in ADSIEdit you can go
to CN= under CN=Microsoft Exchange. If you delegated at the
Admin Group level then it will be at CN=

Hope that helps!

--
Nitin Shukla
Microsoft Support

(nitinsh@online.microsoft.com)

This posting is provided "AS IS" with no warranties, and confers no rights.
"Christopher Gayle" wrote in message
news:%2368Uhw4XEHA.2816@TK2MSFTNGP11.phx.gbl...
> Nitin,
>
> Thank you for your help!
>
> - Do you know which object I need to look at in order to make these
> changes?
>
> - Do you know of a white paper or a good book that could help me find the
> correct object or objects that needs to be changed?
>
> Thanks again for your help!
>
> Christopher Gayle
>
>
>
> "Nitin Shukla (MSFT)" wrote in message
> news:O0fjJMtXEHA.2940@TK2MSFTNGP09.phx.gbl...
>> You can use ADSIedit and navigate to the object on which you gave the
>> individual "Exchange View Only Admin" and then look for that user and
>> customize the permissions in a more granular fashion there.
>>
>> --
>> Nitin Shukla
>> Microsoft Support
>>
>> (nitinsh@online.microsoft.com)
>>
>> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>> "Christopher Gayle" wrote in message
>> news:OT1FHxsXEHA.648@TK2MSFTNGP10.phx.gbl...
>> > We granted a our Help Desk the "Exchange View Only Admin" right from
>> > the
>> > Exchange 2003 System Manager - (Delegation of Control Wizard).
>> >
>> > I wanted to know if it was possible to customize the "Exchange View
>> > Only
>> > Admin" ACL to:
>> >
>> > 1. Deny the Help Desk the ability to delete email accounts.
>> >
>> > 2. Deny the Help Desk the ability to modify the permissions on email
>> > accounts.
>> >
>> > Thank you in advance for any and all help with this issue!
>> >
>> > Christopher Gayle
>> > cgayle@iliant.com
>> >
>> >
>>
>>
>
>