Description of the tool to deny Send As permissions and Receive As permissions for administrators in Microsoft Solution for Hosted Messaging and Collaboration 4.5

This article describes the tool that is used to deny Send As permissions and Receive As permissions for administrators in Microsoft Solution for Hosted Messaging and Collaboration 4.5.

When you deploy Microsoft Solution for Hosted Messaging and Collaboration, a security group that is named CSRAdmins and a security group that is named Admins are created for each hosted organization. If you create these organizations in Hosted Messaging and Collaboration 4.5, these groups are denied Send As permissions and Receive As permissions in Active Directory. However, if the groups were created in earlier versions of Hosted Messaging and Collaboration, the groups are not denied Send As permissions and Receive As permissions.

Update information

A supported feature that modifies the default behavior of the product is now available from Microsoft, but it is only intended to modify the behavior that this article describes. Apply it only to systems that specifically require it. This feature may receive additional testing. Therefore, if you are not severely affected by the lack of this feature, we recommend that you wait for the next update rollup for the Hosted Exchange services in Microsoft Solution for Hosted Messaging and Collaboration 4.5 that contains this feature.

To obtain this feature immediately, download the feature by following the instructions later in this article or contact Microsoft Product Support Services. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

Prerequisites

You must have Hosted Messaging and Collaboration 4.0 or Hosted Messaging and Collaboration 4.5 installed before you apply this update.

Restart requirement

You do not have to restart your computer after you apply this update.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

To install the tool to deny Send As permissions and Receive As permissions to administrators, follow these steps:

1. Copy the EmailPermissionMigration.msi file from the update to any server in the deployment.
2. Run the .msi file. Accept all the default settings.
3. On the server on which you installed the tool, log on as a domain administrator.
4. Locate the following directory:
   %ProgramFiles%\Microsoft Hosting\Provisioning\EmailPermissionMigration
5. From this directory, run the EmailPermissionMigration.exe file.

You can also run the tool at a command prompt window. To do this, follow these steps:

1. Open a command prompt window, and then change the directory to the following directory:
   %ProgramFiles%\Microsoft Hosting\Provisioning\EmailPermissionMigration
2. Run the following command:
   EmailPermissionMigration.exe –LogFile <FileName>
   Note The -LogFile parameter specifies the name of the text file to store log events. If the parameter is not specified, a log file that is named by using the start time is generated. For example, the following log file is generated:
   EmailPermissionMigrationTool_20080808123456.log

This tool is also available in Update Rollup 4 for Microsoft Solution for Hosted Messaging and Collaboration 4.0. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

For more information, click the following article number to view the article in the Microsoft Knowledge Base: