I am currently operating in a 2010/2003 co-existance mode. I have attempted to assign RBAC permissions to a test "help desk" user. I have assigned them to the default "help desk" group. The "help desk" built-in RBAC group has the following assigned roles:
Mail Recipient Creation
Mail Recipients
User Options
View-Only Recipients
When I am logged in with this user and access Exchange Management Console or the ECP, my test user account has full permissions. The user is able to dismount and mount mailboxes, create groups, modify Organization Management group. Pretty much do everything a full exchange admin would be able to do.
Any ideas on why the restrictions aren't working correctly?