Security Explorer 9.8.1 - Installation Guide

Chat now with support

Table 12. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange 2007–2010 mixed mode
If the user entered in the Run as window has these privileges:	And these privileges are used to connect to Exchange Server:	Then these restrictions are possible in Security Explorer:
Domain Administrator Exchange Organization Administrator (2007) Member of Organization Management	Windows® Authentication Valid Alternative Credential	No restrictions
Domain User Exchange Organization Administrator (2007) Member of Organization Management	Windows Authentication Valid Alternative Credential	Cannot create, delete, and manage distribution groups. Cannot manage Active Directory® permissions for mailboxes and public folders (View-only mode).
Domain User	Windows Authentication	Cannot connect to Exchange.
Domain User	Valid Alternative Credential	Cannot create, delete, and manage security and distribution groups (except dynamic distribution groups). Cannot manage Active Directory permissions for mailboxes and public folders (View-only mode).
NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox

Table 13. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange 2007–2013 mixed mode
If the user entered in the Run as window has these privileges:	And these privileges are used to connect to Exchange Server:	Then these restrictions are possible in Security Explorer:
Domain Administrator	Windows® Authentication	No restrictions
Domain Administrator	Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts. Cannot create mailboxes on Exchange 2007.
Domain User is member of Organization Management and Exchange Organization Administrators domain groups	Windows Authentication Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts. Cannot create mailboxes on Exchange 2007.
Domain User	Windows Authentication	Cannot connect to Exchange
Domain User	Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts. Cannot create mailboxes on Exchange 2007.
NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox

Table 14. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange mixed modes (2010–2013, 2010–2016, 2010-2019, 2013–2016, 2013-2019, 2016-2019)
If the user entered in the Run as window has these privileges:	And these privileges are used to connect to Exchange Server:	Then these restrictions are possible in Security Explorer:
Domain Administrator	Windows® Authentication	No restrictions
Domain Administrator	Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts.
Domain User is member of Organization Management domain group	Windows Authentication Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts.
Domain User	Windows Authentication	Cannot connect to Exchange
Domain User	Valid Alternative Credential	Cannot manage Directory permissions for all objects. Cannot delete mail contacts.
NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox