Home / server / Questions / 302754
In Process
Duardon
Asked: 2011-08-19 12:02:19 +0800 CST

What GPO rights are required for an exchange service account?

  • 772

I'm trying to create an exchange domain service account. I'd like to define the rights in a Group Policy Object.

since this is for both a 2 node DAG, and 2 node CAS Array, I need to know the rights for services like "Exchange Server RPC Client Access" service, etc.

Does anyone know where I can find these GPO rights?

windows-service group-policy exchange-2010 dag cas

1 Answers

  1. The Exchange services are installed and run mostly under the NT AUTHORITY\LOCAL SYSTEM and NT AUTHORITY\NETWORK SERVICE accounts and should not be changed. If you do change them, you'll likely be in unsupported territory, and there really is no reason to change the logon account.

    Creating a DAG and/or CAS array doesn't require the Exchange services to be running under a different user, all you need is an appropriately privileged user account to create the CAS array and DAG (by default the user account that installed Exchange is granted the Exchange Org Administrator).

    • 3