Security Explorer 9.9.2 - Installation Guide

Chat now with support

Only a user who is a Domain Administrator and Exchange Administrator has no restrictions for mailbox management in Security Explorer. If a user uses Run As to start Security Explorer and that user does not have enough privileges and enters valid Alternative Credentials (Domain User, Exchange Administrator, Local Administrator, Has Mailbox, Has Impersonation), there are some restrictions with mailbox management in Security Explorer.

•

•

•

Table 5. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange 2010
If the user entered in the Run as window has these privileges:	And these privileges are used to connect to Exchange Server:	Then these restrictions are possible in Security Explorer:
Domain Administrator Member of Organization Management	Windows® Authentication Valid Alternative Credential	No restrictions
Domain User Member of Organization Management	Windows Authentication Valid Alternative Credential	Cannot create, delete and manage distribution groups. Cannot manage Active Directory® permissions for mailboxes and public folders (View-only mode).
Domain User	Windows Authentication	Cannot connect to Exchange.
Domain User	Valid Alternative Credential	Cannot create, delete, and manage security and distribution groups (except dynamic distribution groups). Cannot create mail-enabled public folders. Cannot manage Active Directory permissions for mailboxes and public folders (View-only mode).
NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox

Table 6. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange 2013, 2016, 2019
If the user entered in the Run as window has these privileges:	And these privileges are used to connect to Exchange Server:	Then these restrictions are possible in Security Explorer:
Domain Administrator	Windows® Authentication	No restrictions
Domain Administrator	Valid Alternative Credential	Cannot manage Active Directory® permissions for all objects. Cannot delete mail contacts.
Domain User is member of Organization Management domain group	Windows Authentication Valid Alternative Credential	Cannot manage Active Directory permissions for all objects. Cannot delete mail contacts.
Domain User	Windows Authentication	Cannot connect to Exchange.
Domain User	Valid Alternative Credential	Cannot manage Active Directory permissions for all objects. Cannot delete mail contacts.
NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox

Table 7. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange mixed modes (2010–2013, 2010–2016, 2010-2019, 2013–2016, 2013-2019, 2016-2019)
If the user entered in the Run as window has these privileges:	And these privileges are used to connect to Exchange Server:	Then these restrictions are possible in Security Explorer:
Domain Administrator	Windows® Authentication	No restrictions
Domain Administrator	Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts.
Domain User is member of Organization Management domain group	Windows Authentication Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts.
Domain User	Windows Authentication	Cannot connect to Exchange
Domain User	Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts.
NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox