Exchange Full Administrator

  • Article

 

When you assign a user or a group Exchange Full Administrator permissions, the user or the group can fully administer Exchange Server computer information and modify permissions. A user who has Exchange Full Administrator permissions has the following rights:

Organization Rights:

  • Full Control permissions on the MsExchConfiguration container (this object and its subcontainers).

  • Deny Receive-As permissions and Send-As permissions on the Organization container (this object and its subcontainers).

  • Read permissions and Change permissions on the Deleted Objects container in the Configuration naming context (Config NC) (this object and its subcontainers).

Administrative Group Rights:

  • Read, List object, and List contents permissions on the MsExchConfiguration container (this object only).

  • Read, List object, and List contents permissions on the Organization container (this object and its subcontainers).

  • Full Control, Deny Send-As, and Deny Receive-As permissions on the Administrator Groups container (this object and its subcontainers).

  • Full Control permissions (except for Change) on the Connections container (this object and its sub-containers).

  • Read, List object, List contents, and Write properties permissions on the Offline Address Lists container (this object and its subcontainers).