Yeah, even if the docs don't say it, you absolutely need it. The way Exchange works is that it slowly drills down through the levels until you get to what it is you need to see, if you don't have view on the stuff above what you want to see that you have FC on, you aren't getting there. It isn't like file level stuff where you can specify a direct folder to start looking in. It possibly could be done that way, but not with ESM as it is currently written. Plus you would have to know exact pathing of what you were trying to get to and that isn't the easiest thing to do with the Exchange structure in the config container. It is one of the few areas of AD I actually prefer going into with LDP over ADFIND.
joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Tuesday, June 01, 2004 3:36 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] OT(again)-exchange delegation I thought there was more specific documentation, but I can't locate it at the moment. As I recall, you do need to have view only rights at the ORG level and then full at the AG level. As you can tell, you can't see the ORG to get to your AG without it. I'm going off of memory though. I don't have a lab handy to replicate the situation and I can't locate the permissions docs. I will say that the kb 'infers' that you need the read-only rights. Since you were pulled out of that manually, I'd say you need to be added back in (use the wizard to grant view only at the org level). Al -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Tuesday, June 01, 2004 2:58 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT(again)-exchange delegation yeah i know, but the article seems to imply(or its just my reading) that you just give admin full exchange admin rights at the admin group they need to administer. in my experience now, that doesn't seem to be the case as without the wizard giving us view only rights at the org, in adsiedit i see my group is nowhere listed in the org container or administrative groups container. thus i can't see anything(including my admin group) in ESM. my question is, am i supposed to have those rights listed in the kb when just given full admin rights to my admin group and nothing else OR am i also supposed to have view only rights at the org level as well? do you know any more specific documentation on this? thanks -----Original Message----- From: Mulnick, Al [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 01, 2004 2:47 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] OT(again)-exchange delegation IIRC, you need view only at the ORG level as well although the KB is not well written to show that. http://support.microsoft.com/default.aspx?scid=kb;en-us;823018 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Tuesday, June 01, 2004 1:30 PM To: ActiveDir (E-mail) Subject: [ActiveDir] OT(again)-exchange delegation when delegating permissions in ESM, do you still need to give admins view only admin rights to the org? we have been delegated full exchange admin rights to our admin group and compleltly taken out of the org and now when i fire up ESM, i see nothing. Thanks. This is relaed to another exchange post I sent but doesn't seem to be getting any takers. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
