How does eControl assign rights or permissions?
eControl does not assign rights or permissions to users. In fact, eControl allows you to remove all adminstrator privileges and supervisor rights in your target systems. The eControl service must be registered as a user with administrator permissions in the target systems (Active Directory, Exchange, eDirectory, GroupWise). There are no changes made to existing accounts. There are no changes to anything in Active Directory or Exchange (rules, profiles, policies, etc.). We recommend you create a new user with administrator privileges to be used by eControl. This account must be created in an OU that has no password expiration policy applied and the password must be set to never expire. The eControl service carries out the account management tasks the administrator has authorised on behalf of the user.