立即与支持人员聊天
与支持团队交流

Security Explorer 9.9.2 - Release Notes

Restrictions with mailbox management

Only a user who is a Domain Administrator and Exchange Administrator has no restrictions for mailbox management in Security Explorer. If a user uses Run As to start Security Explorer and that user does not have enough privileges and enters valid Alternative Credentials (Domain User, Exchange Administrator, Local Administrator, Has Mailbox, Has Impersonation), there are some restrictions with mailbox management in Security Explorer.

Exchange 2010

Domain Administrator

Member of Organization Management

Windows® Authentication

Valid Alternative Credential

No restrictions

Domain User

Member of Organization Management

Windows Authentication

Valid Alternative Credential

Cannot create, delete and manage distribution groups.

Cannot manage Active Directory® permissions for mailboxes and public folders (View-only mode).

Domain User

Windows Authentication

Cannot connect to Exchange.

Domain User

Valid Alternative Credential

Cannot create, delete, and manage security and distribution groups (except dynamic distribution groups).

Cannot create mail-enabled public folders.

Cannot manage Active Directory permissions for mailboxes and public folders (View-only mode).

Exchange 2013, 2016, and 2019

Domain Administrator

Windows® Authentication

No restrictions

Domain Administrator

Valid Alternative Credential

Cannot manage Active Directory® permissions for all objects. Cannot delete mail contacts.

Domain User is member of Organization Management domain group

Windows Authentication

Valid Alternative Credential

Cannot manage Active Directory permissions for all objects.

Cannot delete mail contacts.

Domain User

Windows Authentication

Cannot connect to Exchange.

Domain User

Valid Alternative Credential

Cannot manage Active Directory permissions for all objects. Cannot delete mail contacts.

Mixed Mode (Exchange 2010–2013, 2010–2016, 2010-2019, 2013–2016, 2013-2019, 2016-2019)

Table 12. Restrictions with mailbox management in Security Explorer with Microsoft® Exchange mixed modes (2010–2013, 2010–2016, 2010-2019, 2013–2016, 2013-2019, 2016-2019)

Domain Administrator

Windows® Authentication

No restrictions

Domain Administrator

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Domain User is member of Organization Management domain group

Windows Authentication

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

Domain User

Windows Authentication

Cannot connect to Exchange

Domain User

Valid Alternative Credential

Cannot manage Directory permissions for all objects.

Cannot delete mail contacts.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级