The best solution is to use the tick box in the Manager can update members option.
Then they can use Outlook to manage group memberships without any need to change Active Directory permisions.
You need to assign a manager to Security Group using the Managed by tab and then checking the Manager can update address lists.
Regards
Steve
Main Topics
Browse All Topics





by: gupnitPosted on 2008-07-17 at 20:36:39ID: 22032710
Hi,
You have to plan your strategy based upon how much of a delegation are you willing to give to your end user.
Assumumption 1: dentify a user either based upon Distribution Groups (one or more) and Delegate him/her the permission to make changes to a specific DG or many DG. All upto you. This way the user will be able to add/remove users. He/she will become the contact for any changes in that. This is a very common strategy followed in most organizations. Since He/she would belong to a department/projct and would be in a better position to decide who belong to that DG.
==============
You want end users to only add/remove users from Distrbution Group
Suggestion:
=========
I
Assumumption 2:
==============
You want end users to add/remove users from Distrbution Group and also add/delete users
Suggestion:
=========
Well, in that case you can create a OU and delegate the identified user the permission to add/remove users. and then follow the suggestion above for the DG.
Hope this is what you were looking for. Any clarifications - contact me :-)
Thanks
Nitin Gupta