CYA: Securing Exchange Server 2003 and Outlook Web Access: Cover Your A** By Getting It Right the First Time

Even though Exchange Server 2003 has been developed under Microsoft s Trustworthy Computing Initiative, meaning that the product is secure by design and secure by default, you still need to manage, delegate, and control different types of Exchange-related permissions throughout your organization. Since Exchange 2003 builds on the Windows 2000/2003 security model, this concept shouldn t be too foreign to you.
In this chapter, we look at the following topics:
Delegating administrative control in System Manager
Controlling mailbox permissions
Controlling Public Folder permissions
By the time you reach the end of this chapter, you will have been introduced to some of the general Exchange 2003 permissions, and you will have seen how to delegate control to groups or users via the Exchange Administration Delegation Wizard. You will also have learned how you assign Exchange (or more specifically, MAPI) permissions when dealing with mailboxes and Public Folders.
You can use the Exchange Administration Delegation Wizard to assign various administrative permissions to different Windows 2000/2003 groups or users.
The Exchange Administration Delegation Wizard simplifies the process of delegating permissions to Exchange administrators. You can delegate administrative permissions at the organization level in System Manager or at an administrative group level. The scope of permissions you set is determined by the location from which you launch the wizard. If you start the wizard from the organization level, the groups or users that you specify will have administrative permissions at the organizational level. If...