Active Directory Permissions needed for Symantec Mail Security for Microsoft Exchange

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

 During the installation of Symantec Mail Security for Microsoft Exchange (SMSMSE) it is necessary to know which permissions are needed.

Resolution

The following permissions are needed:

1. To install SMSMSE - Domain Administrator credentials are needed in order to create the SMSMSE Active Directory users needed.

2. To run the "Symantec Mail Security for Microsoft Exchange" service - a seperate service account is recommended. The service account / user account should NOT be a member of the Domain Admin group but should be a member of the Exchange´s Organization Management group and if possible have a mailbox.
 

Applies To

Windows 2008 / 2012 Active Directory
Exchange 2007 / 2010 / 2013
SMSMSE 6.5.x / 7.0.x / 7.5.x