Module 3: Securing Exchange Server 2003 55

Practice: Creating and Securing Administrative Groups

*****************************ILLEGAL FOR NON-TRAINER USE******************************

Objectives In this practice, you will:
„ Create an administrative group by using the Exchange System Manager.
„ Delegate administrative rights by using the Delegation Wizard.

Instructions Ensure that the MTL-DC1 virtual machine is running.

Note The MTL-CL1 and MTL-NT1 virtual machines are required in the lab.
You can pause these virtual machines for this practice.

Practice
Ç Create an administrative group by using the Exchange System
Manager
1. In Exchange System Manager, right-click the TailspinToys Organization
object, and click Properties. In the TailspinToys Organization Properties
dialog box, select Display Administrative Groups. Click OK.
2. Click OK to acknowledge the warning and then close and open the
Exchange System Manager.
3. Right-click Administrative Groups, point to New, and then click
Administrative Group.
4. In the Properties dialog box, type TailspinToys Eastern Division AG and
then click OK.
56 Module 3: Securing Exchange Server 2003

Ç Delegating administrative rights by using the Delegation Wizard

1. In Exchange System Manager, in the console tree, expand Administrative
Groups, right-click TailspinToys Eastern Division AG, and then click
Delegate control.
2. In the Exchange Administration Delegation Wizard, on the Welcome page,
click Next.
3. On the Users or Groups page, click Add.
4. In the Delegate Control dialog box, click Browse.
5. In the Select Users, Computers or Groups dialog box, type Ben Smith
and then click OK.
6. In the Delegate Control dialog box, in the Role box, click Exchange
Administrator and then click OK.
7. On the Users or Groups page, click Next.
8. On the Exchange Administration Delegation Wizard page, click Finish.
9. In the Exchange System Manager dialog box, read the warning that
indicates an Exchange administrator must also be a member of the local
machine administrator group, and then click OK.
10. Open Active Directory Users and Computers. In the Users container,
right-click Ben Smith, and then click Properties.
11. In the Ben Smith Properties dialog box, on the Member Of tab, click
Add.
12. In the Select Groups dialog box, type Domain Admins and then click OK.
13. In the Ben Smith Properties dialog box, click OK.
14. Close all open windows.

Note Do not shut down the virtual machines.