Microsoft® Exchange Server 2010 Inside Out

Security groups and accounts created by Exchange

As discussed in Chapter 1, Exchange depends on Active Directory and fully exploits the extendable schema to add a set of objects and properties that enable the Exchange components to work. Alongside the schema changes, the Exchange installation procedure creates a number of security groups and mail-enabled accounts that Exchange uses for different purposes. Table 2-6 lists the security groups that Exchange creates in Active Directory and their purposes. Most are universal security groups (USGs), which are created in a new organizational unit (OU) called Microsoft Exchange Security Groups in the root domain of the forest. As indicated in Table 2-6, many are used to hold the security principals required ...