Giving Help Desk Staff the Ability to Move Mailboxes

We want to let our Help desk staff move mailboxes on our Microsoft Exchange Server. I know that we can assign the required permissions on individual mailboxes, but I want to automate the process instead of having to set permissions on each object.

The Microsoft article "Minimum permissions necessary to perform Exchange-related tasks" (http://support.microsoft.com/?kbid=316792) describes the permissions you need to move mailboxes. The user account you're using must have the Exchange Administrator role, and it must have Write access to the mapisvc.inf file on the workstation from which you're running the Exchange Move Mailbox Wizard. The user account you use must also have Write permission on several individual attributes—homeMDB, homeMTA, msExchHomeServerName, and targetAddress—in the individual mailbox. (For Exchange 2003 mailboxes, you must also have Write permissions on msExchOmaAdminExtendedSettings and msExchOmaAdminWirelessEnable.) The fastest way to assign this permission to multiple users is to customize Exchange System Manager's (ESM's) Exchange Task Wizard to add a new task for permissions assignment. The Microsoft article "How to customize the task list in the Delegation Wizard" (http://support.microsoft.com/?kbid=308404) describes this process in detail; briefly, you'll need to edit the delegwiz.inf file and add a new template that specifies the permissions that need to be set. For Exchange 2000, the additional template would look something like the following (you need to add the additional Exchange 2003–only attributes for moving Exchange 2003 mailboxes):

\[template14\]
AppliesToClasses=domainDns,
organizationalUnit,container

Description = "Move Mailboxes to another Exchange Server"

ObjectTypes = user

\[template14.user\]
homeMDB=RP,WP
homeMTA=RP,WP
msExchHomeServerName=RP,WP
targetAddress=RP,WP

Discuss this Article 1

Sean (not verified)
on Jan 3, 2007
The Microsoft article "How to customize the task list in the Delegation Wizard" (http://support.microsoft.com/?kbid=308404) doesn't have anything to do with Exchange System Manager's (ESM's) Exchange Task Wizard, as is stated in the article.

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• The Microsoft
Technology Roadmap
• Office 365 Implementation
• Hyper-V Optimizing
• Windows 8 Deployment
and much more!

Come See Paul Thurrott & Rod Trent in Person!

Early Registration Now Open

Upcoming Training

Mastering System Center 2012

During over 6 hours of training you can join John Savill from your computer as he will walk you through the key components and capabilities of System Center 2012, what’s involved in using the components, and the benefit they can bring to your environment.

Register Now

Current Issue

May 2013 - The NameTranslate object is useful when you need to translate Active Directory object names between different formats, but it's awkward to use from PowerShell. Here's a PowerShell script that eliminates the awkwardness.

CURRENT ISSUE / ARCHIVE / SUBSCRIBE

Windows Forums

Get answers to questions, share tips, and engage with the Windows Community in our Forums.