Appendix B: Permissions Guide

Overview

The tables in this appendix list the specific permissions granted on various Exchange objects during installation. They’re excerpted from Appendix B of version 4.01 of the Microsoft Exchange 2000 Permissions Guide whitepaper. This version was current as of Exchange 2000 SP3; later versions may be available from http://www.microsoft.com/exchange.

Permissions on Objects in the Exchange Configuration Tree

• Table B-1. Permissions granted to objects in the Microsoft Exchange container

• Table B-2. Permissions granted on the ADC Connection Agreement container

• Table B-3. Permissions granted on the Organization container

• Table B-4. Permissions granted on the Address Lists container

• Table B-5. Permissions granted on the Addressing container

• Table B-6. Permissions set on the Recipient Update Services container

• Table B-7. Permissions set on individual administrative groups within the Administrative Groups container

• Table B-8. Permissions set on the default top-level public folder hierarchy

• Table B-9. Permissions set on the CA container

• Table B-10. Permissions set on the Connections container within each routing group

Permissions on the Server Object and Its Children

• Table B-11. Permissions set on the Server object

• Table B-12. Permissions set on the server-specific Protocols container

• Table B-13. Permissions set on the System Attendant object

• Table B-14. Permissions set on the MTA object

Permissions on Other Objects in the Configuration Tree

• Table B-15. Permissions set on the Deleted Items container (cn=Deleted Items, cn=Configuration, dc=domain)

• Table B-16. Permissions set on the Active Directory Connector object (cn=Active Directory Connector, cn=Exchange Settings, cn=server, cn=Servers, cn=site,cn=sites, cn=Configuration,…)

Permissions Set on Public Key Services Objects

• Table B-17. Permissions set on the MachineEnrollmentAgent object (cn=MachineEnrollmentAgent, cn=Certificate Templates, cn=Public Key Services, …)

• Table B-18. Permissions set on the ExchangeUser object (cn=Exchange User, cn=Certificate Templates, cn=Public Key Services, …)

• Table B-19. Permissions set on the ExchangeUserSignature object (cn=ExchangeUserSignature, cn=Certificate Templates, cn=Public Key Services, …)

Permissions on Objects in the Domain Naming Context

• Table B-20. Permissions set on the Domain container (dc=domain)

• Table B-21. Permissions set on the domain proxy container (cn=Microsoft Exchange System Objects, dc=domain)

• Table B-22. Permissions set on the Exchange Enterprise Servers group

• Table B-23. Permissions set on the Exchange Domain Servers group