How to Remove Cluster Service Account Exchange Permissions After Upgrading from Exchange 2000 to Exchange Server 2003

  • Article

 

After you upgrade to Exchange 2003, the Cluster service account no longer needs any Exchange-specific permissions.

Before You Begin

Before you perform the procedure in this topic, be aware of the following:

  • Because Exchange permissions are needed for Exchange 2000, do not perform the following procedure until you have upgraded or uninstalled all Exchange 2000 clusters that use the same Cluster service account as your Exchange 2003 clusters.

  • To follow the common security practice known as least privilege, you should remove the Exchange-specific permissions you assigned during the upgrade.

  • You need to perform this procedure only once per cluster.

Procedure

To remove Cluster service account Exchange permissions after upgrading from Exchange 2000 to Exchange Server 2003

  1. Open Exchange System Manager.

  2. In the console tree, right-click your Exchange organization name, and then click Delegate control.

  3. On the Welcome to the Exchange Administration Delegation Wizard page, click Next.

  4. On the Users or Groups page, select the Cluster service, and then click Remove.

  5. Click Next, and then click Finish.