CertsBraindumps.com

HostingMultipleVirtualOrganizationswithMicrosoftWindows2000andMicrosoftExchange2000ServerImplementingvirtualorganizationsforWindows2000andExchange2000isgoingtorequireseveralbasicsteps,eachofwhichwillbeillustratedinmoredetailsbelow:1.
Addadomainsuffixforeachvirtualorganization,thatsuffixwillbeusedindefiningtheuser'sUserPrincipleName(UPN)ande-mailaddress.
2.
SetupamailExchanger(MX)recordintheDomainNameSystem(DNS)foreachvirtualorganizationtopointtothehostingorganization.
3.
Createnewstoragegroupsanddatabasesforeachvirtualorganization(optional).
4.
CreateOUsforeachvirtualorganization.
5.
Createglobalgroupsforeachvirtualorganization;allmembersforeachOUwillgointhesegroups.
6.
SettheappropriaterightsonthedefaultWindows2000containers,andassignspecialrightstotheOUsthatarecreated.
7.
AddthedomainnamestothelistofdomainsforwhichExchangewillacceptandroutemailasinbound.
8.
Createapublicfolderpsuedorootforeachvirtualorganization,andsetrightsonitsothatitisonlyvisibleandaccessiblebymembersofthatvirtualorganization(optional).
9.
Onceit'sworking,delegatetheappropriatepermissionsanddelivercustomMicrosoftManagementConsole(MMC)workspaceswithwhichdelegatedadministratorscanperformtheirtasks(optional).
Tohelpillustrateeachofthesepoints,thispaperwillwalkthroughthescenarioofthefictitiousorganization,WideWorldImporting,anorganizationthatisrunningWindows2000andExchange2000andhasdecidedtooffermailhostingservices.
TheyhavealreadyinstalledWindows2000andActiveDirectorywithanamespaceofWide-World-Importers.
Microsoft.
com.
TheyhavealsoinstalledExchange2000andareabletosendandreceivee-mailforContoso.
Microsoft.
comusers.
Threecompanieshavesignedupforthehostingservices–Contoso.
Microsoft.
com,ContosoCable.
Microsoft.
com,andContosoTelecom.
Microsoft.
com.
Hereistheprocesstogothroughtocreatetheinfrastructuretosupporteachofthosevirtualorganizations.
1.
AddingaNewDomainSuffixThefirstthingthatneedstobedoneistoaddadomainsuffixforeachofthethreecompaniesthatarebeinghosted.
ThisallowsuserswithinanOUtohaveaUPNande-mailaddressthatcorrespondstotheircompanyname,insteadofWide-World-Importers.
com.
Toaddanewsuffix,dothefollowing:1.
OpentheActiveDirectoryDomainsandTrustssnap-in.
2.
Right-clickonthetop-mostnodeinthetreethatistitledActiveDirectoryDomainsandTrusts,NOTtheactualdomainthatisshownintheMMC.
3.
ClickPropertiesfromthemenu,andadialogboxwithonetabtitledUPNSuffixesappears.
CertsBraindumps.
com4.
TypeinthenameofeachvirtualorganizationandclickAdd.
OnceallthesuffixeshavebeenaddedtothelistclickOK.
Thosesuffixeswillnowappearinthelistofdomainsdropdownthatisusedforlogondomainduringuseraccountcreation.
2.
DNSSetupDNSneedstocontainaMailExchanger(MX)recordforeachvirtualorganizationthatisbeinghosted.
Inorderforroutingtoproperlyoccur,theMXrecordshouldpointtotheIPaddress(es)oftheExchangemachinesthatarealreadyconfiguredtosendandreceiveSMTPmessagestoandfromtheInternet.
TheExchangeserversactastheroutingbackboneforthevariousvirtualorganizations,sendingeachmessagetoitsappropriateserverbaseduponrecipient.
3.
CreatingStorageGroupsandDatabasesThisstepisoptional,anditsnecessityshouldonlybedrivenbybusinessrequirements.
Itmayberequiredorpreferredtocreateseparatestoragegroupsanddatabasesforeachvirtualorg.
Theadvantagesindoingthisarethatitallowsformoreflexibilityandgranularityinconfiguringtheorganization.
Inaddition,ifthereareproblemswiththedatabaseforonevirtualorganization,theotherorganizationsarenotaffectedbyit.
Inthisscenariowheretherearemultiplevirtualorganizationsbeinghostedononebox,wearecreatingseparatestoragegroupsforeachorg.
Eachstoragegroupalsohasitsownprivatemailboxstoredatabase.
Oncethosehavebeencreated,thestoragestructureoftheserverlookslikethis:CertsBraindumps.
comItincludesstoragegroupsanddatabasesforeachofthevirtualorganizationsthataregoingtobecreated,inadditiontothedefaultstoragegroup,mailstoreandpublicfolderstore.
It'simportanttonotethattherearelimitationswhenrunningmultipleprivatemailstoresononeserver,suchthattheycanallonlybelinkedtoonedefaultpublicfolderstore.
So,inthisscenariotheprivatemailstoresareallassociatedwiththePrimaryPublicFolderStorefortheirdefaultpublicstoredata.
4.
CreatingOrganizationalUnitsThenextstepistocreateOrganizationalUnits(OUs)inActiveDirectoryforeachvirtualorganizationbeinghosted.
Todothis,starttheActiveDirectoryUsersandComputerssnap-in.
Right-clickonthedomainandselectNew…OrganizationalUnitfromthemenu.
AdialogboxappearswhereyoucantypethenameoftheOUtoadd.
Repeatthisstepforeachvirtualorganizationbeinghosted.
CertsBraindumps.
com5.
CreatingGroupsandAddUsersAftertheOUhasbeencreated,aglobalgroupneedstobecreatedineveryOU.
ThatgroupnameshouldreflectthefactthatitcontainsallusersinthatOU.
Todothis:1.
Right-clicktheOUnameintheleftpaneoftheActiveDirectoryUsersandComputerssnap-in.
2.
SelectNew…Groupfromthemenu.
Awizarddialogboxappears.
3.
Typeinthegroupname,andselecttheoptionstomakeitGlobalinscopeandSecurityintype.
4.
ClickNextonthewizard.
Younowhavetheoptionofcreatingane-mailaddressforthegroup.
Thisisrecommendedsinceitgivesyouanaliasbywhichyoucane-maileverymemberofthevirtualorganization.
5.
TypethenameofExchangealiasyouwantforthegroup–theCreateanExchangee-mailaddressboxisalreadycheckedbydefault–andclickNexttocontinue.
6.
ClickFinishtocompletethewizard.
Afterthegrouphasbeenadded,addtheusersforthevirtualorganization.
CreateeachuserinthecorrespondingOUforthatvirtualorg.
Whencreatingtheuser,makesureanExchangemailboxiscreatedalso.
Ifseparatedatabasesand/orstoragegroupswerecreatedforeachvirtualorg,makesurethemailboxiscreatedintheappropriatestoragelocationfortheorganizationtowhichtheuserbelongs.
AfteralltheusershavebeenaddedtotheOU,putthemallintheglobalgroupforthatOU.
Asnewusersareaddedtotheorganization,theyneedmerelybecreatedintheOUandaddedtotheglobalgroupforthatOUtoinheritallthesamepermissionsasotherusersinthatorg.
Finally,one"master"globaloruniversalgroupshouldbecreatedthatcontainstheOU'sglobalgroupforeveryvirtualorganizationyouarehosting(notethatyourdomainneedstobeinNativemodetosupportUniversalgroupsornestingglobalgroupswithinotherglobalgroups).
Whenthisgroupiscreatedmakesuretocreateane-mailaliasforit.
Ifneworganizationsareaddedinthefuture,theirglobalgroupalsoneedstobeaddedtothismastergroup.
ThenecessityofthisisforcreatingmultiplepsuedopublicfolderrootsintheExchangeorganization(oneforeachvirtualorganization).
CertsBraindumps.
com6.
SettingRightsAfterthegroupshavebeencreated,rightsneedtobesetoneachOUtoproperlyrestricttheabilitytoseeotherusersandorganizations.
Inshort,usersshouldbeabletoseeonlyotherusersinhisorherOU.
Domainadministratorsandrelatedgroupsshouldbeabletoseeallusersinallorganizationssothattheycanbesufficientlymanagedandmaintained.
OncethesepermissionshavebeensetonthedirectorythenExchangerespectsthemandlimitstheamountofdatathatisreturnedwhenusingtheAddressBook,searchingforotherusers,etc.
SoitservesthedualpurposeofalsocreatingyourGAL.
NOTE:Thereisaveryimportantexceptiontothisrule.
Usersthataccesse-mailviatheMicrosoftOutlookWebAccess(OWA)clientdonothavetheper-userrightsforActiveDirectoryappliedtodirectoryqueries.
ThiseffectivelyallowsthemtoseeALLusersintheActiveDirectorydirectoryserviceirrespectiveoftheACLsthathavebeenassigned.
Tocontrolthis,thereisanattributethatwasputinplacetocontrolthescopeofsearchesthatOWAperforms,butitisnotexposedintheMMCadmin.
Toclosethissecurityhole,youneedtosettheattributemsExchQueryBaseDNtopointtotheOUfortheuser'svirtualorganization(orAddressListifyouusethem)toscopethesearch.
ThisneedstobesetoneachuserthatwillbeusingOWA.
AtoollikeLDPoracustomCDOEXMscriptcanbeusedtosetthisattribute.
Settinguptherightsisatwo-stepprocess.
ThefirststepistoremovetherightsthatexistbydefaultonallexistingandnewOUs.
ThiscanbeaccomplishedbyremovingallrightsforAuthenticatedUsersoneachdefaultcontainer(i.
e.
everythingexceptfortheOUsthatwerecreatedforeachvirtualorganization).
Dothefollowingtoremovethedefaultrights:1.
OpentheActiveDirectoryUsersandComputerssnap-in.
2.
SelectView…AdvancedFeaturesfromthemenu.
Thisisrequiredtoseethesecuritysettingsoneachcontainer.
3.
Foreachcontainer,right-clickonthecontainerandselectPropertiesfromthemenu.
Thisbringsupapropertiesdialogboxwiththreetabs.
4.
ClickontheSecuritytab.
Listedonitareallthegroupsthathaveaccessrightstothecontainer.
FindtheentryforAuthenticatedUsers.
CertsBraindumps.
com5.
DeselectalltherightsfortheAuthenticatedUsersgroup.
DONOTchangetherightsfortheDomainAdmins,ExchangeAdminsorEnterpriseAdminsgroups.
TheEveryonegroupmayalsobeinthere;ifso,removeallrightsforitalso.
NOTE:Makesurethatyoujustdeselecttherights,anddonotchooseDenyrights.
DoingsowillpreventallusersfromgainingaccessuntiltheDenysettingischanged.
6.
ClickOKtosavethesettings.
Repeatforeverydefaultcontainerinthedomain.
Nowthatallthedefaultrightshavebeenremovedfromthebuiltincontainers,usersineachvirtualorganizationwillnotbeabletoseeanyoftheobjectsthatlivewithinthem.
DomainAdmins,ExchangeAdmins,andEnterpriseAdminshowever,canstillseeallobjectsinthedirectory.
ThenextstepistofurtherrefinetherightssothatOUmemberscanonlyseeothermembersoftheirownOU.
Rightnow,anyOUmembercanseeanyotherOUmember.
Tosetthefinalsetofpermissions,dothefollowing(theseinstructionsassumethattheUsersandComputerssnap-inisstillopen;ifnotfollowsteps1and2above):1.
Right-clickoneachOUthatwascreatedandselectPropertiesfromthemenu.
Adialogboxwithfivetabsappears.
2.
SelecttheSecuritytab.
3.
DeselectallviewrightsfortheAuthenticatedUsersgroup.
Thisisthesameprocessthatwasdonetothebuiltincontainersinthepreviouspartofthissection.
4.
ClickAddtobringupthelistofusersandgroupsinActiveDirectory.
FindthenameoftheglobalgroupcreatedfortheOUwithwhichyouareworkingandclickOKtoaddittothelistofsecurityprincipalsfortheOU.
CertsBraindumps.
com5.
Verifythatthegroupaddedinstep4wasgivenReadrights;ifitwasn'tit,additnow.
6.
ClickOKtoapplythechangesanddismissthedialogbox.
RepeatthesestepsforeachvirtualorganizationOU.
Oncethesestepshavebeencompleted,thepermissionsportionofconfigurationiscomplete.
IfyouweretologoffandlogonasamemberofoneoftheOUsandsetACLsonanobject,thelistofobjectsthatwouldshowupinthedialogboxwouldonlyincludeotherobjectsinthatuser'shomeOU.
TheremainingstepsimplementthesecuritythathasbeencreatedthusfarintoExchange.
7.
DomainSetupForExchangetounderstandthatmessagescominginneedtoberoutedasinternalrecipientsevenwhenthee-maildomainnamedoesn'tmatchtheWindowsdomainname,youneedtocreaterecipientpoliciesforeachdomainname.
Whenaddingtherecipientpolicy,youcanmakethedeterminationaboutwhethertheExchangeorganizationshouldbeauthoritativeforthedomainthatisbeingadded.
Inmostcases,thatoptionshouldbeselected.
Youcandosobysimplycheckingtheauthoritativeboxontherecipientpolicy.
Addthepolicybydoingthefollowing:1.
OpentheExchangeSystemManagertool.
2.
ExpandtheRecipientsfolderandclickRecipientPoliciesintheleftpane.
3.
Right-clickonRecipientPoliciesandselectNew…RecipientPolicyfromthemenu.
4.
TypeinanamefortherecipientpolicyintheNameeditbox.
5.
ClickModify.
ThisbringsuptheFindExchangeRecipientsdialogboxwhereyoucancreateafilterforuserstowhichthepolicywillapply.
6.
SelecttheAdvancedtab.
7.
Createafiltercriterionforgroupmembership.
ClickField,selectUserthenselectGroupMembership.
SetthecriteriatobeIs(exactly)thenameoftheOUgroupforwhichyouarecreatingthepolicyandclickFindNow.
Enteringthecorrectgroupnamemaynotbecompletelyintuitiveatfirst.
ItonlyworksifyouusethefullyqualifiedLDAPname.
Forexample,CN=AllContosoUsers,OU=Contoso,DC=spnt5,DC=comIfyouarenotsurewhatthecorrectnameistheeasiestwaytofinditiswithADSIEdit,whichyoucaninstallwiththeWindows2000ResourceKit.
It'sincludedontheWindows2000CDROMintheSupportdirectory.
Tofindthefullyqualifiedname,openADSIEditandexpandtheDomainNC(namingcontext)tree.
Underthat,expandthetreeforyourdomain.
UnderneathityouwillseealistofallthecontainersandOU'sinthedomain.
ExpandtheOUtogetalistofalltheusersandgroupswithinit.
Right-clickthegroupnameandselectPropertiesfromthemenutobringupthepropertiesdialogbox.
AtthetopofthedialogboxisaPath:fieldthatcontainsthefullyqualifiedname.
Youneedtocapturetheentirestringaftertheservername.
Forexample,intheAllContososampleabove,thepathinADSIEditlookslikethis:LDAP://sp2000.
spnt5.
com/CN=AllContosoUsers,OU=Contoso,DC=spnt5,DC=comYoujustneedtoclickinthefieldanddragallthewaytotheright,beginningafterLDAP://sp2000.
spnt5.
com/.
TheremainderiswhatneedstobeinputintheFinddialogbox.
AnotherpointtorememberisthatthecriteriaofIs(exactly)ismisleadinginthiscase.
Ausercanbelongtomultiplegroups,andhewillhaveamultivaluedvalueforhismemberOfproperty.
Is(exactly)willstillfindthematchaslongashehasonecompletegroupmembershipstringthatmatchestheentryintheFinddialogbox.
CertsBraindumps.
com8.
ClickOKonthesearchdialogboxwhenitisreturningtheresultsyouexpect.
ThisreturnsfocustothepolicyPropertiesdialogbox.
9.
ClickApply.
Thissavesthepolicy,whichisrequiredbeforeyoucanstartaddingadditionaldomainaddressestoit.
10.
SelecttheE-MailAddressestab.
11.
ClickNew.
12.
ClickSMTPAddressintheE-mailaddresstype:listbox,andclickOK.
ThisbringsuptheSMTPAddressPropertiesdialogboxwhereyoucantypeinthee-maildomaininformationforthedomainsforwhichExchangeshouldroutemessages.
13.
Typeinthedomainnameinfo(i.
e.
@Contoso.
com).
LeavetheThisExchangeOrganizationisresponsibleforallmaildeliverytothisaddresscheckboxselected(itisbydefault).
CertsBraindumps.
com14.
ClickOKtosavethenewaddressentry.
15.
ClickthenewentryintheGenerationRuleslistboxandchecktheboxnexttoit.
16.
ClickSetAsPrimaryonthedialogbox,thenclickOKtosavechanges.
Adialogboxappearsaskingifitisokaytoupdateallcorrespondinge-mailaddressestousethenewaddress.
17.
ClickYestoaccept.
Thiswillassignthenewdomaine-mailaddresstoalltheusersintheOU'sglobalgroup.
8.
SettingPublicFolderVirtualRootsTocompletethesetoftoolsavailableforusers,aPublicFolderrootwilllikelyneedtobeestablishedforeachvirtualorganization.
ThesamesetofprincipalsthatwereusedinconfiguringtheotherelementsofExchangeshouldbeusedhere–eachvirtualorganizationshouldonly"see"onepublicfolderroot,andwithinthatroottheyshouldhaveexclusivedomaintocontrolitasiftheyweretheonlyorganizationinExchange.
Toaccomplishthat,apublicfolderneedstobecreatedforeachvirtualorganizationthatisatapeerleveltothepublicfolder"root"foreveryothervirtualorg.
Toconfigurethepsuedopublicfolderrootdothefollowing:1.
OpentheExchangeSystemAdministrator.
2.
ExpanddowntothePublicFoldersnode.
3.
Right-clickonthePublicFoldersnodeandselectNew…PublicFolderfromthemenu.
4.
TypeinanameintheNameeditboxthatwillmakethefoldereasilydistinguishableastherootforthatvirtualorganization.
CertsBraindumps.
com5.
ClickOKtocreatethefolder.
Thedialogboxwillcloseandthefolderiscreated.
Next,permissionsneedtobesetonthefoldertolimititsvisibilitytoonlymembersofthevirtualorganizationandtheadministrationteamsforWindows2000and/orExchange2000.
6.
GototheSystemAdministratoronthefolderthatwasjustcreatedandselectPropertiesfromthemenu.
7.
SelectthePermissionstab.
Thefirstsetofrightstobesetisclientrights.
8.
SelectClientPermissions….
9.
ClickAddandselecta)theglobalgroupfortheOUandb)themastergroupofallOUglobalgroupsthatwasdescribedinthesectiononcreatinggroupsandusers.
ClickOKtoclosetheGALdialogboxandaddthegroupstothepermissionslist.
10.
SelecttheOUglobalgroupinthepermissionlist.
MakesurethatataminimumrightshavebeengiventothatgroupforFolderVisibleandReadItems.
11.
Clickonthemastergroupinthepermissionlist.
DeselectALLtherightsforthisgroup.
CertsBraindumps.
comBysettingtherightsinthismanner,itwillpreventusersfromallothervirtualorganizationsfromseeingthispublicfolderpsuedoroot,yetstillallowusersintheOU'sglobalgrouptoseeandworkwithitasifitweretheonlypublicfolderinthetree.
Ofcourse,additionalfolderscanbecreatedbeneaththisfoldertocreatethe"virtualtree"forthevirtualorg.
12.
ClickOKtosavechangestotheclientpermissionsandclosethedialogbox.
13.
ClickDirectoryRights….
Permissionswillbesetinheretoeliminatetheabilityfornon-Exchangeuserstoseethepublicfoldersinthedirectory,unlesstheyhaveadministrativeprivilegesforWindowsorExchange.
14.
UnchecktheAllowinheritablepermissions…checkbox.
Thisisnecessarytomodifythedirectory-relatedpermissionsontheobject.
Whenthedialogboxappearsafterdeselectingthebox,clickCopy.
15.
ClickAuthenticatedUsersgroupinthelistofsecurityprincipalsforthisobject.
16.
ClickRemove.
Thiseliminatesthedefaultrightsofalluserstoseetheobjectinthedirectory.
Also,bydefaultthough,WindowsandExchangeadministratorsdohavetherighttoseetheobject.
17.
ClickOKtosavechanges.
18.
ClickOKagainforthefolderpropertiesdialogboxtosavetheentirepermissionsconfigurationthatwasdone.
The"rightsconfigured"isnowcomplete.
Inaddition,settingrightsbeloweachofthesevirtualfolderrootsisnowmucheasier,becausetheEveryonegroupcanbeusedforrightsassignmentifdesired.
TheEveryonegroupcanbeusedforfoldersbelowthevirtualrootbecauseusersinotherOUscan'tseetheroottobeginwith,sosettingrightsforEveryonebelowthevirtualrootmeansthattheywilljustbeappliedtothoseusersthatcanseetherootfolder.
Thismeansthatit'srelativelyeasytosetupahierarchyoffoldersforthevirtualorganizationinwhichsomeareread-only,someareread/write,andotherscanbecreate/read/write.
9.
AdministrationDelegationItshouldberepeatedthatthisstepisalsooptional.
Bydoingthestepsinthissection,youwillgrantadministrativerightstocertainendusersintheorganizationtoperformadministrativetasks.
ThisshouldonlybepermittedifitisabusinessrequirementforoneormoremembersofthevirtualorganizationtobeCertsBraindumps.
comabletoadministertheotherusersinhisorhervirtualorg.
Followingthesestepswillgivetheuser(s)rightsinthedirectoryitselfandinPlatinumforthingssuchascreatinganddeletingusers,mailboxes,groups,settingrightsonaper-mailboxbasis,etc.
Ifyourbusinessmodeldoesnotrequirethatlevelofdelegationthenyoushouldnotperformthestepsinthissection.
Todelegateadministrativerightsforthevirtualorganization'sentireOUtoanOUmember,dothefollowing:1.
OpentheActiveDirectoryUsersandComputerssnap-in.
2.
SelecttheOUforthevirtualorganizationforwhichyouwanttosetupdelegatedrights.
3.
SelecttheActionmenu,thenDelegateControl…fromthere.
TheActiveDirectoryDelegationWizardappears.
4.
Usingthewizard,selecttheuser(s)orgroup(s)thatyouwanttohaveadministrativecontrolovertheOU,includingtheabilitytoaddanddeletemailboxes,changemailboxsettings,etc.
ClickNexttocontinue.
OntheTaskstoDelegatepage,theoptiontoDelegatethefollowingcommontasksisselectedbydefault.
Usethisoptiontoselectrightsatareasonablyhighlevel.
Ifyouwantorneedtoselectverygranularrights,thenselectCreateacustomtasktodelegateoption;followingthewizardyoucanselectindividualpropertiestowhichrightscanbeassigned.
5.
Assumingthatthedefaultdelegationoptionwasselected(see#4foramoredetailedexplanation),selectthefollowingrights:a.
Create,delete,andmanageuseraccountsb.
Readalluserinformationc.
Create,delete,andmanagegroups(suchasDistributionLists)d.
ModifythemembershipofagroupCertsBraindumps.
com6.
ClickNextthenFinishtocompletethewizard.
Therightsformanagementhavenowbeendelegated.
YoumayalsowishtocreateacustomUsersandComputerssnap-infortheindividualsthathavedelegatedadministrativecontrol.
ItprovidesaviewofonlytheOUtowhichtherightshavebeendelegated.
Tocreatethecustomsnap-in,dothefollowing:1.
ClickStart,Runandtype"MMC"intheeditbox,andpressEnter.
ThisstartsanemptyMMCshell.
2.
ClickontheConsolemenu,thenAdd/RemoveSnap-insmenu.
Thisbringsupadialogboxofsnap-insthathavebeenaddedforthisMMCfile.
3.
ClickAddtoaddanewsnap-in.
4.
Double-clickontheActiveDirectoryUsersandComputerssnap-intoaddittothisMMC.
5.
ClickClosetodismissthelistofsnap-insdialogbox,thenclickOKtoclosethecurrentsnap-inlistdialogboxandreturntotheMMC.
TheUsersandComputerssnap-inshouldbedisplayedintheMMCatthispoint.
6.
ClickontheOUforthevirtualorganization.
7.
SelecttheActionmenu,thentheNewWindowFromHeremenu.
YounowhavetwowindowsopenintheMMC–onewiththeentiredomainandonewithonlytheOU.
Youneedtoclosethewindowfortheentiredomain.
8.
SelecttheWindowmenuthenselectthefirstiteminthewindowlist–itshouldstartwithConsoleRoot\ActiveDirectoryUsersandComputers.
Thatshouldbringupthefirstwindowagainwithallofthedomaininformationinit.
9.
Closethewindowonly,nottheentireconsole.
Thisshouldleaveaconsolewithonlyonewindowinit–theviewoftheOU.
NowrightsneedtobesetsothattheMMCthathasbeencreatedcan'tbeseriouslymodifiedordamaged.
CertsBraindumps.
com10.
SelectConsolethenOptionsfromthemenu.
Adialogboxappearswithoptionsfortheconsoleyou'recreating.
TheonlyoptionthatreallyneedstobesetistochangetheConsoleModetoUserMode–FullAccess.
ThisshouldallowtheusertocustomizetheMMCfilewithoutbreakingit.
11.
ClickOKtosavetheconsolesettings.
12.
ClickConsolethenSavefromthemenuandsavetheMMCtoafile.
Oncethefilehasbeensaved,youcane-mailittoanyonethatneedstoadministertheOUforthevirtualorganization.
TheyjustneedtoopentheMMCfileanditwillautomaticallydisplayinformationfortheOUtowhichthey'vebeendelegatedrights.
Thoseareallthestepsrequiredtosetuprudimentaryadministrativedelegationforthevirtualorganizations.
Thatalsocompletestheprocessforsettinguphostingofavirtualorganization.
Ideallyyouwouldalsobeabletodelegaterightstoadministeroneinformationstoreordatabase,recipientCertsBraindumps.
compolicies,etc.
,butthegranularityrequiredinExchangetopermitthatisnotpresentyet,oratleastnotdocumented.
Note:Don'tforgettovotethistopicincertsbraindumps.
com