Chat now with support
Chat with Support

Security Explorer 9.8 - Installation Guide

Mixed Mode (Exchange 2007–2010)

 
Table 12. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange 2007–2010 mixed mode
If the user entered in the Run as window has these privileges:
And these privileges are used to connect to Exchange Server:
Then these restrictions are possible in Security Explorer:

Domain Administrator

Exchange Organization Administrator (2007)

Member of Organization Management

Windows® Authentication

Valid Alternative Credential

No restrictions

Domain User

Exchange Organization Administrator (2007)

Member of Organization Management

Windows Authentication

Valid Alternative Credential

Cannot create, delete, and manage distribution groups.

Cannot manage Active Directory® permissions for mailboxes and public folders (View-only mode).

Domain User

Windows Authentication

Cannot connect to Exchange.

Domain User

Valid Alternative Credential

Cannot create, delete, and manage security and distribution groups (except dynamic distribution groups).

Cannot manage Active Directory permissions for mailboxes and public folders (View-only mode).

NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox

Mixed Mode (Exchange 2007–2013)

 
Table 13. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange 2007–2013 mixed mode
If the user entered in the Run as window has these privileges:
And these privileges are used to connect to Exchange Server:
Then these restrictions are possible in Security Explorer:

Domain Administrator

Windows® Authentication

No restrictions

Domain Administrator

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Cannot create mailboxes on Exchange 2007.

Domain User is member of Organization Management and Exchange Organization Administrators domain groups

Windows Authentication

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Cannot create mailboxes on Exchange 2007.

Domain User

Windows Authentication

Cannot connect to Exchange

Domain User

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Cannot create mailboxes on Exchange 2007.

NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox

Mixed Modes (Exchange 2010–2013, 2010-2016, 2013-2016)

 
Table 14. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange 2010–2013, 2010-2016, and 2013-2016 mixed modes
If the user entered in the Run as window has these privileges:
And these privileges are used to connect to Exchange Server:
Then these restrictions are possible in Security Explorer:

Domain Administrator

Windows® Authentication

No restrictions

Domain Administrator

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Domain User is member of Organization Management domain group

Windows Authentication

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Domain User

Windows Authentication

Cannot connect to Exchange

Domain User

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

NOTE: Valid Alternative Credential: Domain User, Exchange Admin, Local Admin, Has Mailbox
 

 

Installing Security Explorer

•
Upgrading Security Explorer
•
Installing Security Explorer
•
Starting Security Explorer
•
Applying a license file
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating