XADM: Exchange Administrators Have More Permissions than Expected

After you have delegated Exchange Administrator rights at the Administrative Group level to a user, the user with Exchange Administrator rights can change Client permission roles on a public folder that another user has created. The user with Exchange Administrator rights should get a "permission denied" error instead.

To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base: After you install Service Pack 2, and after you have delegated Exchange Administrator rights at the Administrative Group level to a user, the user with Exchange Administrator rights should not be able change Client permission roles on a public folder that another user has created.

Instead, the user with Exchange Administrator rights should receive the following error message:

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 2.