Exchange 2010 Special Permissions

Question

Is it possible to give my technicians permissions to create email/windows accounts in exchange, but not be able to read mailbox content of other users? 
I hope that makes sense.

Answer 1

By default nobody can read mailbox content except who owns the mailbox. If your technician wants to read mailbox content then he has to grant full mailbox permission the mailbox that he wants to open. Here is an example on custom RBAC role... http://blogs.technet.com/b/rmilne/archive/2013/11/21/creating-rbac-role-to-delegate-editing-contacts.aspx
You can create a custom role for technician and remove ability to execute Add-MailboxPermission cmdlet. 
Now if you want to give him this ability to grant permission and don't want to block it for some reason (if he is helping for shared mailbox permission etc...) on other mailboxes then you can give him look for
Admin Audit Log (which is by default enabled) on permission to see if he is granted permission to himself or not and if yes then you can ask him...
Now if you want to look at granular level on what he is trying to access inside mailbox then you can enable
Mailbox Audit log but that has to be enabled at each mailbox level.