question

cwsmith181 avatar image
0 Votes"
cwsmith181 asked cwsmith181 answered

Active Directory Group: Exchange Install Domain Servers purpose

Can anybody telll me if the group "Exchange Install Domain Servers" is needed past the installation of Exchange 2019? What is it's purpose if it must stay?

office-exchange-server-administrationoffice-exchange-server-itpro
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndyDavid avatar image
0 Votes"
AndyDavid answered

I would leave it. Its not doing any harm and will be recreated when you run the next CU or upgrade anyway.

https://docs.microsoft.com/en-us/exchange/plan-and-deploy/active-directory/ad-changes?view=exchserver-2019#prepare-active-directory-domains

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

cwsmith181 avatar image
0 Votes"
cwsmith181 answered

Agree - it's not hurting anything. I'm just trying to mitigate all of the insecure paths that Exchange creates in AD. This group is a member of a sensitive AD group that could be taken advantage of.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.