What are the service account considerations for enabling Exchange 2003 support in Directory and (NETIQKB1272)

  • 7701272
  • 02-Feb-2007
  • 10-Jan-2013

Environment

NetIQ Directory and Resource Administrator 8.5.x
NetIQ Directory and Resource Administrator 8.6.x
Microsoft Exchange Server 2003

 

Situation

What are the service account considerations for enabling Exchange 2003 support in Directory and Resource Administrator?
 
What permissions does the Exchange Access Account require for Exchange 2003 support?

Resolution

To enable Exchange 2003 support in Directory and Resource Administrator, the service account or the override account must have the following permissions:

  • The account must be an Exchange Full Administrator in the Exchange organization for the managed domain.
  • The account must be a member of either the Account Operators local group or the Exchange Domain Servers global group in the managed domain.

Additional Information

Exchange 2003 allows you to hide group membership. If Exchange 2003 is installed in a managed domain, the domain override account for that Administration server must be a member of the Account Operators group in that domain. If the override account is not a member of the Account Operators group, you cannot manage hidden group members
 
Formerly known as NETIQKB1272