• Add the AuthLite DA group (AuthLite-protected Domain admins) to the Exchange Organization Admins group
  • Remove the Exchange Organization Admins group from Builtin\Administrators, as well as Domain/Enterprise Admins if it is in there