How-to: Delegate permissions to only create Exchange resource mailboxes using Active Roles Server (4221392)

How-to: Delegate permissions to only create Exchange resource mailboxes using Active Roles Server

In order to create Exchange resource mailboxes, users must be granted the ability to create user accounts and manage Exchange resource mailboxes, which includes creation. This can be achieved by applying the following Active Roles Server Access Templates:

* Users - Create User Accounts
* Exchange - Manage Resource, Linked, and Shared Mailboxes

There are two built-in Active Roles Server templates that will provide the restricted ability to only create Resource Mailboxes in a targeted location.

In Active Roles Server, navigate to the OU that requires the delegation (i.e. Active Directory | mydomain.com | MyOU)

1. Right-click the OU and click Delegate Control
2. Click Add
3. Click Next and then click Add
4. Select the users, groups or OUs to delegate the control to; then click Add, then OK
5. Click Next to select the Access Templates
6. Expand Active Directory, scroll down and select "Users - Create User Accounts" (NOTE: Do NOT click Next)
7. Scroll down | expand Exchange | select "Exchange - Manage Resource, Linked and Shared Mailboxes"
8. Click Next and then click Next again on Inheritance Options
9. Select "Propagate permissions to Active Directory" if applicable and then click Next
10. Click Finish and then OK

Have the delegated user confirm Exchange Resource Mailbox creation.