Historical Post Series – ADSIEdit & ExMerge prep

The Historical Post Series are writings I produced in my former blog on Live Spaces and due their value are being reposted here.  Hope you enjoy these.

ADSIEdit.msc – to install and use for ExMerge Admin Mailbox Permissions

originally posted August 2006

Exchange 2003’s enhanced security permissions leave no default account or group with Read As and Send As permissions to Exchange Mailboxes (Enterprise Administrators, Domain Administrators, & the Administrator).  It is possible to alter the security permissions for a mailstore on its properties sheet by negating inheritance and then overriding the settings.  The only thing is it isn’t as easy to put the Genie  back in the bottle once you’re done with whatever task required this security breach.  With ADSIEdit it is possible to make the needed changes and revert back in a much cleaner way.

ADSIEdit is part of the Windows 2003 server resource tools.  In SBS these are found on disc 2 under the SUPPORTTOOLS directory.  Click support.msi, agree to the EULA, and they install.  Now you are able to type ADSIEdit.msc into the command window provided in the newly added Windows Support Tools program group.  This will invoke the tool.

A word of CAUTION.  Accidental keystrokes or mouse clicks could be extraordinarily calamitous and dangerous when using this tool – proceed with due caution.  You have been warned!

You will have to logoff and logon for the security token to be reissued with the changes.