Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 374
  • Last Modified:

Allow user in top level domain manage distribution lists on sub domain

We currently run windows 2003 server/exchange with a top level domain and sub domain.  Top level domain contains executives and sub domain contains operational users.  so the domain name space is similar to the following:  

topleveldomain.local
ops.topleveldomain.local

One of the executives would like the ability to modify the members of the distribution groups located on the sub domain's exchange server.  Steps I've already tried to accomplish this by is by delegating control to that particular executive on the OU that all of the distribution groups are contained in.  This method, was found on multiple websites during my searching.  

Now I really do not want to give him admin rights for it's not the proper way to do this but might have to until I find a solution.  Could anyone help?

Thanks,

Steve
0
sgaglione
Asked:
sgaglione
  • 3
  • 3
1 Solution
 
BembiCEOCommented:
You can set the delegation on distribution group level !?! ... rather than on that OU
0
 
sgaglioneAuthor Commented:
the distribution groups have inherited the right's from the OU level.  still no go.  have forced replication and has been 6 days since rights were set so i don't believe it's a replication issue either.  
0
 
sgaglioneAuthor Commented:
other reason why i did it on the OU level is so in the future any more distribution groups made, he can automatically modify them without my intervention and adding rights.
0
Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

 
BembiCEOCommented:
> the distribution groups have inherited the right's from the OU level.
Nevertheless you can add additional rights on lower levels, so you can mix inherited and local rights

Whats about to put these list into a seperate OU?
0
 
sgaglioneAuthor Commented:
do you mean create a new OU and move the groups into that and also do a delegation of rights to change groups to that user?  
0
 
BembiCEOCommented:
Yes, for example, in that way...

But note, a delegation is nothing else than giving a user admin permissions. The sense of this function is, to delegate administrative work of subtrees to aub-admins by simply a few mouse clicks.

If you do not want to give him admin access, you can add the user to the security list and give him only the right, you want assign to him. In that way, you have under control, what he can do or not. Putting these groups together is more a way to simplify administration
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now