Disable RBAC Mail Recipient Role "Full Access Permissions"

I have created a NEW Management Role on our Exchanger Server 2010 Called "JR Admin"

I have Set the WRITE SCOPE to use an organizational unit which contains ONLY the Standard Users OU rather than our EXECUTIVE STAFF (Sensitive Users) OU.

I have added the "Mail Recipients" Role

And finally the USER who is the JR Admin.

This works great for restricting the ability to change exchange server settings,

But for SOME REASON, I am still able to change "Mail Recipient" Settings for the SENSITIVE USERS.

Its like the WRITE SCOPE is not respecting the OU restriction setting.

Thx, Joe

Thx, Joe