-
Title
What permissions are required for Unified Communication Diagnostics to monitor Exchange. -
Description
What permissions are required for the Unified Communication Diagnostics service account to monitor Exchange?
-
Resolution
The specific permissions required to connect to Exchange and why we require them are as follows:
Exchange 2010/2013
•Member of Local Administrators group in order to have:
-Read access to operating system drive to retrieve disk information
-Read access to Service Control Manager
-Read access to WMI to retrieve disk information
-Read access to Registry to access Performance Counters, DNS settings, and Exchange information
-Read access to PowerShell cmdlets for queue and mailbox database information
•Member of View-Only Exchange Administrator in order to have:
-Read access to PowerShell cmdlets for queue and mailbox database informationExchange 2007
Member of Local Administrators group in order to have:
-Read access to operating system drive to retrieve disk information
-Read access to Service Control Manager
-Read access to WMI to retrieve disk information
-Read access to Registry to access Performance Counters, DNS settings, and Exchange information
-Read access to PowerShell cmdlets for queue, storage group, store, and mailbox information
•Member of View-Only Exchange Administrator in order to have:
-Read access to PowerShell cmdlets for queue, storage group, store, and mailbox informationExchange 2003
•Member of Local Administrators group in order to have:
-Read access to operating system drive to retrieve disk information
-Read access to admin shares for drives contain stores to retrieve disk information
-Read access to Windows system directory to access Event Logs
-Read access to Service Control Manager
-Read access to WMI to retrieve disk information
-Read access to Registry to access Performance Counters, DNS settings, and Event Logs
-Read access for Microsoft Queue Viewer
•Member of View-Only Exchange Administrator in order to have:
-Read access to Active Directory for storage group, store, and mailbox information