Chat now with support
Chat with Support

Security Explorer 9.9.2 - Installation Guide

Restrictions with mailbox management

Only a user who is a Domain Administrator and Exchange Administrator has no restrictions for mailbox management in Security Explorer. If a user uses Run As to start Security Explorer and that user does not have enough privileges and enters valid Alternative Credentials (Domain User, Exchange Administrator, Local Administrator, Has Mailbox, Has Impersonation), there are some restrictions with mailbox management in Security Explorer.

Exchange 2010

Domain Administrator

Member of Organization Management

Windows® Authentication

Valid Alternative Credential

No restrictions

Domain User

Member of Organization Management

Windows Authentication

Valid Alternative Credential

Cannot create, delete and manage distribution groups.

Cannot manage Active Directory® permissions for mailboxes and public folders (View-only mode).

Domain User

Windows Authentication

Cannot connect to Exchange.

Domain User

Valid Alternative Credential

Cannot create, delete, and manage security and distribution groups (except dynamic distribution groups).

Cannot create mail-enabled public folders.

Cannot manage Active Directory permissions for mailboxes and public folders (View-only mode).

Exchange 2013, 2016, 2019

Domain Administrator

Windows® Authentication

No restrictions

Domain Administrator

Valid Alternative Credential

Cannot manage Active Directory® permissions for all objects. Cannot delete mail contacts.

Domain User is member of Organization Management domain group

Windows Authentication

Valid Alternative Credential

Cannot manage Active Directory permissions for all objects.

Cannot delete mail contacts.

Domain User

Windows Authentication

Cannot connect to Exchange.

Domain User

Valid Alternative Credential

Cannot manage Active Directory permissions for all objects. Cannot delete mail contacts.

Mixed Modes (Exchange 2010–2013, 2010–2016, 2010-2019, 2013–2016, 2013-2019, 2016-2019)

Table 7. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange mixed modes (2010–2013, 2010–2016, 2010-2019, 2013–2016, 2013-2019, 2016-2019)

Domain Administrator

Windows® Authentication

No restrictions

Domain Administrator

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Domain User is member of Organization Management domain group

Windows Authentication

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Domain User

Windows Authentication

Cannot connect to Exchange

Domain User

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating