Exchange 2010: Resolution of AdminSDHolder Elevation issue

By now you may have read or heard that the /PrepareDomain operation in the Exchange 2010 Release Candidate (RC) applies certain Access Control Entries (ACEs) on the AdminSDHolder object within Active Directory. In particular, /PrepareDomain grants the Exchange Windows Permissions universal security group (USG) the ability to modify the members attribute, the ability to change […]

By now you may have read or heard that the /PrepareDomain operation in the Exchange 2010 Release Candidate (RC) applies certain Access Control Entries (ACEs) on the AdminSDHolder object within Active Directory. In particular, /PrepareDomain grants the Exchange Windows Permissions universal security group (USG) the ability to modify the members attribute, the ability to change and reset passwords, and the ability to modify the permissions of any object protected by the AdminSDHolder role.

Full ArticleExchange team

About The Author

Deepak Gupta is a IT & Web Consultant. He is the founder and CEO of diTii.com & DIT Technologies, where he's engaged in providing Technology Consultancy, Design and Development of Desktop, Web and Mobile applications using various tools and softwares. Sign-up for the Email for daily updates. Google+ Profile.