XADM: Exchange Administrators Have More Permissions than Expected

Article translations Article translations
Article ID: 309090 - View products that this article applies to.
This article was previously published under Q309090
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

SYMPTOMS

After you have delegated Exchange Administrator rights at the Administrative Group level to a user, the user with Exchange Administrator rights can change Client permission roles on a public folder that another user has created. The user with Exchange Administrator rights should get a "permission denied" error instead.

RESOLUTION

To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack
After you install Service Pack 2, and after you have delegated Exchange Administrator rights at the Administrative Group level to a user, the user with Exchange Administrator rights should not be able change Client permission roles on a public folder that another user has created.

Instead, the user with Exchange Administrator rights should receive the following error message:
Unable to create the required MAPI profile. Please verify that you have sufficient permissions to write to the MAPISVC.INF file.

ID number: c103073a
Exchange System Manager

STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 2.

Properties

Article ID: 309090 - Last Review: October 24, 2013 - Revision: 1.5
APPLIES TO
  • Microsoft Exchange 2000 Server Standard Edition
Keywords: 
kbnosurvey kbarchive kbbug kbexchange2000sp2fix kbnofix KB309090

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com