Dear Experts,
We have an Exchange 2007 server and would like to enable a group of users the permission to manage distribution groups (create, edit, delete) within the global address list.
We have created a new security group (GAL-Admin). How do we give this group the relevant permissions on the GAL so that its members can manage Exchange distribution lists?
Thanks for your help.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
We are using an SBS2008.
Do you mean that the new security group I have created (for the users who will manage the groups) needs to be mail-enabled?
Yes, these users need to have the ability to add, edit and remove distribution lists within the GAL. They should be able to do this from within Outlook 2007.
Be default, ,when using the SBS wizard to create a mail-enabled group, the group appears in "domain/MyBusiness/Distrib
Thanks for your feedback.
As it is SBS, that complicates matters greatly. You shouldn't change the way that SBS has set things up, because it will usually break things inside SBS. You could try modifying the OU, but it isn't something I would do on SBS. With SBS I leave things alone.
To grant permissions to an Exchange object, the group or user has to be mail enabled.
Do you frequently change groups then? On all of the sites I manage, group management is one of the few things that I do unless there is a new user or someone leaves.
Simon.
OK. But that's too complicated - I don't want end-users playing around with AD or Exchange consoles.
Let's start again - what we need to do is give certain end-users the possibility of creating & editing company-wide email distribution lists from within Outlook. At the moment these lists are 'groups' and within the GAL. Please suggest a recommendation for the future and how to set this up.
Thanks
Short answer - not possible with native tools.
Groups can only be created on the domain. That requires permissions in the domain and the domain management tools.
You can grant users management of a group, but that is an individual - I do not think you grant a group permissions to modify the membership of a group.
The only thing I can suggest is that you would get something written for you, that runs Powershell commands for you in the background with the relevant permissions. However you would need to hire a developer to do that - I am not aware of anything that does off the shelf.
Simon.
Sorry that I have not replied for a while - been away on holiday ;O).
The end-users don't believe me that basic distribution list admin within Outlook can't be done by themselves! They said that in their last company, they were able to do this! Could this be a difference between Exchange 2003 & 2007?
There has been no change in the behaviour between versions. I am always wary of things users claim they could do at the last company because you have no guarantee that
a. They are correct.
b. The admin wasn't doing something in the background they were not aware of.
c. They were even using Exchange. Most end users do not know what Exchange is - there is an ongoing joke in the Exchange community that Exchange will be renamed Microsoft Office Outlook Server.
Simon.
Business Accounts
Answer for Membership
by: MesthaPosted on 2009-08-28 at 07:40:51ID: 25208140
If you want the users to just manage the groups, then set the group the Managed by setting on the properties of the group. The group will need to be mail enabled.
However to actually create groups, they will need fairly high permissions in the domain to start with. You could look at putting all the groups in to an OU and then delegating control. Then the users will need to have Recipient Admin permissions in Exchange to manage the groups and mail enable them. I don't think you can lock it down in Exchange to just management of groups.
Simon.