Permissions control access to Exchange objects. You should use the Exchange Administration Delegation Wizard to set permissions on organizations and administrative groups, and thus control access to the Exchange objects contained within the organization or administrative group. You can set permissions on some Exchange objects individually. These objects include public folder trees, address lists, and MDBs. For these objects, Exchange uses and extends Active Directory permissions. Examples of Active Directory permissions are Read, Write, and List contents. Examples of extended Exchange permissions are Create public folder and View Information Store status. When looking at an object's permissions, Active Directory permissions are listed first, followed by Exchange extended permissions.
Related TopicsUse Exchange Administration Delegation Wizard Understanding Extended Permissions