|
|
What are the recommended set of permissions for the ERM service account and the logged-on (ERM Administrator account)?
Last post 11-17-2006, 10:38 AM by ERM Admin. 0 replies.
-
What are the recommended set of permissions for the ERM service account and the logged-on (ERM Administrator account)?
|
11-17-2006, 10:38 AM |
ERM Service Account - Member of domain users
- Member of local administrators (or Builtin Administrators if the ERM host server is also a DC).
- "Log on a as a batch job" user rights in the effective local security policy for the server.
- ERM Service account must be granted "Send as" rights to the resource you are managing.
Logged-on account - Member of domain users
- Member of local administrators (or Builtin Administrators if the ERM host server is also a DC).
- Delegated full or normal Exchange Administrator rights
- Member of the Account Operators group
Resources - “Send As” rights granted to ERM Service Account (done automatically as part of ERM-manage process)
|
|
|
|