Exchange 2k3 delegation

[luke.mccormick]

Hi, We're "learning" exchange in my network applications class at tech. We aren't exactly being taught these things and we need to find out how to do them. Exchange is insatlled and so far is working. However What I need, is to be able to delegate one specific user to have editor access to ALL exchange mailboxes and calendars. I know how to do this in outlook, but you have to configure it for EACH and EVERY user by opening outlook under their account, tools, options, delegation. Is there any way I can set this up in system manager so that it takes affect to ALL current users and all users created here-after.

Thanks in advance I really appreciate it!

[fizban2]

Hi, We're "learning" exchange in my network applications class at tech. We aren't exactly being taught these things and we need to find out how to do them. Exchange is insatlled and so far is working. However What I need, is to be able to delegate one specific user to have editor access to ALL exchange mailboxes and calendars. I know how to do this in outlook, but you have to configure it for EACH and EVERY user by opening outlook under their account, tools, options, delegation. Is there any way I can set this up in system manager so that it takes affect to ALL current users and all users created here-after.

Thanks in advance I really appreciate it!

Exchange Server 2003 Roles Delegation

almost anything you need to find on 2003 or 2007 can be found on technet!

Exchange Server 2003 Delegation and Roles

Topic Last Modified: 2005-04-19

By using the Exchange System Manager, you can delegate permissions. You can use the Exchange Administration Delegation Wizard to delegate permissions through roles. Roles are scenario-based. Therefore, the organization administrator can make a user or group the sub-administrator of the Exchange organization, thus granting limited access to certain objects. Selecting the role in the Exchange delegation wizard sets a number of granular permissions in Active Directory® directory service.

Enterprise administrators may want to have more granular details on the exact changes that the Delegation Wizard makes to Active Directory. This chapter explains those changes.

By using the Exchange Administration Delegation Wizard, permissions are applied at the Microsoft® Exchange container level in the Active Directory configuration naming context and inherited throughout the organization. These permissions do not grant any access to objects stored within the domain naming contexts of the forest (that is, where user, group, and contact objects are stored), allowing for higher levels of security and separation.

[luke.mccormick]

I don't think that's what I'm looking for. I did look at that and thought that it could only make the said user an exchange administrator. I just want to make this user a delegate of all other mailboxes and be able to send messages "on behalf of" the other users.

[luke.mccormick]

bump..

[cluberti]

This might do the trick:

http://support.microsoft.com/kb/329622

[luke.mccormick]

thanks cluberti but I need to do this for the entire domain at once if possible, and this is a single tree, single forest, single domain domain.

Thanks again.

[cluberti]

This isn't something you can do on a one to all setting, it's per mailbox. It's just a field in AD, so if you want to figure out which one it is (and your domain is a test one - don't do this in production without testing!!!) you could replicate it via scripts. But you won't find this feature in a GUI anywhere.

[luke.mccormick]

OK, another thing i was considering is maybe is there a setting I can set in the office deploy MSI and deploy it through GPO? or could you help me with this script? I am a complete VBscript noob

Thanks again.

[cluberti]

That is a question best left to the Office forums.