4.9. Delegating Administrative Control
Problem
You want to delegate control over Exchange Server administrative functions to a user or group in your organization.
Solution
Using a graphical user interface
Launch the Exchange System Manager (Exchange System Manager.msc).
Right-click the organization object and select Delegate Control.
At the Exchange Administration Delegation Wizard welcome screen, click Next.
To add users or groups to whom you'd like to delegate administrative access, click Add. Click Browse and type the name of the user or group being granted access. Click OK.
Select the role you wish to grant: Exchange Administrator, Full Administrator, or View-Only Administrator, and click OK.
Click Next, then click Finish. You have successfully delegated an administrative role to the specified user(s) or group(s).
Discussion
Exchange 2000 and Exchange Server 2003 support three distinct administrative roles:
The Exchange Administrator role allows holders to see and change all Exchange-related settings in ESM. However, holders of this role can't change permissions on Exchange-related objects.
The Exchange Full Administrator role can do everything Exchange Administrator can, plus it can be used to change permissions.
The Exchange View-Only Administrator can see settings, but can't make permanent changes.
There's no equivalent of the Exchange 5.5 service account administrator; by design, Microsoft sets the ACEs on mailbox databases to prevent administrators from reading other people's mail without ...