ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Active Directory Permissions needed for Symantec Mail Security for Microsoft Exchange


Article ID: 159151


Updated On:


Mail Security for Microsoft Exchange


 During the installation of Symantec Mail Security for Microsoft Exchange (SMSMSE) it is necessary to know which permissions are needed.


The following permissions are needed:

1. To install SMSMSE - Domain Administrator credentials are needed in order to create the SMSMSE Active Directory users needed.

2. To run the "Symantec Mail Security for Microsoft Exchange" service - a seperate service account is recommended. The service account / user account should NOT be a member of the Domain Admin group but should be a member of the Exchange´s Organization Management group and if possible have a mailbox.

Applies To

Windows 2008 / 2012 Active Directory
Exchange 2007 / 2010 / 2013
SMSMSE 6.5.x / 7.0.x / 7.5.x