I need to administrate an Exchange Server where some powershell commands don't work (like New-Mailbox
). It seems that "Split Permissions" are active on that installation but I'm not sure.
How can I check if split permissions are active?
I need to administrate an Exchange Server where some powershell commands don't work (like New-Mailbox
). It seems that "Split Permissions" are active on that installation but I'm not sure.
How can I check if split permissions are active?
It is not about split permissions enabled or not, you should check if which commands did not work for which account. And to find out what permission is needed/necessary to run this command in exchange 2016.
What is the version of exchange server? Exchange 2013? Microsoft Exchange Server 2013 offers the following types of split permissions models: • RBAC split permissions • Active Directory split permissions
And according to your description, I think you would like to use RBAC. The RBAC security model modifies the default management role assignments to separate who can create security principals in the Active Directory domain partition from those who administer the Exchange organization data in the Active Directory configuration partition. And yes, RBAC is a component that exists on every server running Exchange 2013, and we didn’t need to “enable” it.
https://docs.microsoft.com/en-us/exchange/understanding-role-based-access-control-exchange-2013-help