A colleage of mine just forward a link to the long awaited MS Whitepaper update from Paul Bowden on E2K3 permissions. I have lived by the E2K version of this document, and have long awaited it's replacememnt for E2K3. It is a MUST have to any advanced Exchange deployments!
This guide discusses the necessary minimum rights needed for Exchange administrators to manage Exchange-related data in Active Directory as it pertains to user, inetOrgPerson, group, and contact objects so that separation of administrative tasks can be implemented. Further, this document is a reference guide for administrators implementing a split permissions model.
This time it has sample sample txt files that make using DSACLS easier.
Thanks Henry for the link!