Appendix B: Setup Permissions Guide

Overview

This appendix describes the permissions set in Microsoft Active Directory and in the file system by Microsoft Exchange Server 2003 Setup (and some related processes, such as the Recipient Update Service). This appendix does not describe the permissions set by the Delegation Wizard. Paul Bowden of Microsoft was kind enough to gather the material here, and it appears with his permission.

Each table shows permissions assigned to a particular object. The distinguished name (DN) of the object is given at the top of the table, along with the time at which the permission is applied. The following are the remaining columns in each table:

• The Account column shows which security principal is granted, or denied , the target right.

• The Allow/Deny column indicates whether this access control entry (ACE) allows or denies the specified right.

• The Inherit column indicates whether this ACE is inherited by child objects.

• The Right column shows which permissions are applied or denied.

• The Notes column includes any pertinent notes about the right.