Working with Active Directory Permissions in Microsoft Exchange Server 2003
This guide discusses the necessary minimum rights needed for Exchange administrators to manage Exchange-related data in Active Directory as it pertains to user, inetOrgPerson, group, and contact objects so that separation of administrative tasks can be implemented.
- In many organizations, there are separate administrators for Exchange and Active Directory, which leads to a need to delegate administrative functions, so that distinct boundaries of administrative rights are maintained. In this type of model, known as a split permissions model, operations are decentralized in that two or more operation teams manage aspects of Exchange and Active Directory. For example, one operations team might manage domain and forest functions, while another operations team manages Exchange-related functions. In these situations, certain rights must be delegated to all personnel so that they may complete their job functions without compromising the operational and security boundaries.
The folder in this download, DSACLS Snippets, contains DSACLS command syntax text files. The DSACLS command syntax text files are named according to the location in the Active Directory Users and Computers MMC snap-in that the syntax text refers to. You can copy and paste the content from the DSACLS command syntax text files into the DSACLS.exe tool. For more information, see DSACLS Command Syntax Snippets.
This download is no longer available on microsoft.com. The downloads below are archives provided by the Internet Archive Wayback Machine from the Microsoft Download Center prior to August 2020.
Operating Systems: Windows 2000, Windows Server 2003, Windows XP
- Microsoft Exchange Server 2003
- The file is a Microsoft Word document. Users who do not have Microsoft Word can view this document through the downloadable Word Viewer.
- Click the Download button on this page to start the download.
- Do one of the following:
- To start the installation immediately, click Open or Run this program from its current location.
- To copy the download to your computer for installation at a later time, click Save or Save this program to disk.