Delegate permissions on Active Directory Users&Computers

CASE: HR has to modify user properties such as Address, Telephone,… on AD users without having Administrator Rights. The can NOT create or delete users. 1) Create a new security group (case: “hr_ad_editors”) 2) Right-click on the destination OU (case: “_USERS”) and select Delegate Control … a. Next b. Add users/groups (case: “hr_ad_editors”), click next c. Select the option Create a custom task to delegate, click next d. Select the option Only the following objects and select account objects below, click next e. Select all properties except full control, click next & finish 3) Add specific users/groups to the created

Continue reading »

Change the SSL certificate of Exchange 2007

* Due to the expiration of the existing certificate of our Exchange 2007 server we needed to renew this. And here we have 3 options; 1) renew the certificate as it was (and push it to all users) 2) buy a SSL certificate for this server only 3) buy a wildcard-certificate (*.domain.com) for all servers   * We (temporarely) chose to buy one SSL certificate for this mailserver and discuss the wilcard certificate issue later because this adds a certain amount of resources to our annual budget 🙂 Be aware that the prices for certificates can change a lot according to

Continue reading »

Finally My First Blog

It’s about time I got my own blog. For a few years now I’m working as a Sytem Engineer in the SmallBusiness area of Microsoft. This includes offcourse SmallBusinessServer W2K3 but also Symantec BackupExec and Endpoint Protection, VMware Infrastrucure, Citrix Presentation Server, mailflow, networking infrastructures, etc. At this time I’m already 3 months working in a bigger ICT environment (+100 engineers) for the InternalICT department. This adds items as Altiris Deployment Server, HP SIM, Microsoft System Configuration Manager, Exchange 2007, and so on to the agenda. So after beating your head thousands of times searching for some solutions, you want

Continue reading »