Administrator's Guide - Kerio Software Archive

Chapter 29 Kerio Active Directory ExtensionsFigure 29.4Mailbox Limitsministration. This option is used by default. We recommend creating a local accountfor the Kerio MailServer administration (see chapter 13.2). In case the Active Directoryserver is not accessible, administration of KMS will still be possible if the account ismanaged internally to KMS.• Read only access to administration — user is allowed to access the administration onlyto read it. User can connect to the server with Kerio Administration Console and viewthe settings, however, he/she is not allowed to edit the administration.• Read/write access to administration — full access to the administration. User is allowedto read and write in the administration. As few users as possible should begranted these rights for security reasons.29.4 Group DefinitionWithin Kerio Active Directory Extensions, group definition is almost identical to user accountdefinition; however, the wizard for creating new groups is extended by one step. This stepenables the administrator to define a primary email address that will be used by the group.The Kerio MailServer Account bookmark allows the administrator to define email addresses ofthe group (the E-Mail Addresses button) as well as access rights to Kerio MailServer administration(the Administration Rights button).For detailed information, see chapter 29.3.310