Comments (3)

  1. Good Descriptive article.!

  2. Anon says:

    Awesome writeup! I’m using this fix with the codetwo photo app. I tried a security group at first but that failed. Creating a standard user/service account worked. I found it easier to use Admin Tools console (as I always have it open) and just add the service account to the above groups listed under Microsoft Exchange Security Groups OU. runas the service account and now my HR department can update photos without Domain Admin rights!!!

  3. Mads Awesome says:

    Had some trouble making this work. Got the Access denied error after following all steps.
    I was testing with my own AD user, which happens to be a member of the Domain Admins group.

    Turns out that members of Domain Admin (and several outher goups) are not necessarily included when permissions are delegated. Check out the accepted answer from David Haggard:

Skip to main content