Solved

restrict users to modify Global Address  Distribution List member list

Posted on 2008-10-20
8
557 Views
Last Modified: 2009-10-06
Hi All,

I have exchange server 2007 environment. My problem is that , all the users in my Exchange can modify GAL Distribution List Member list. i want to restrict them . how to do this. please give me your suggestion.

Thanks
0
Comment
Question by:fextech
  • 3
  • 3
8 Comments
 
LVL 8

Expert Comment

by:greesh_hem
ID: 22755668
0
 

Author Comment

by:fextech
ID: 22755690

Thanks for comment Gressh, but i am looking for restriction, not allow .  in my environment users are able to modify the GAL . how it is happend , and how can i stop them for modification in GAL.
0
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 22759596
Add-ADPermission -Identity:'Group Display Name -User:domain\username -AccessRights ReadProperty, WriteProperty -Properties 'Member' -deny
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 

Author Comment

by:fextech
ID: 22765502
Thanks  Greesh, I want to deny writeproperty  for all users except administrator, how i can apply this on a particuler OU 's users or all users .
0
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 22765773
@fextech: Did the above command work for you using -deny switch ?? Or not ??
0
 

Author Comment

by:fextech
ID: 22766091
yes it worked, but i have a lots of users those have permission. and i want to restrict all of them. so how can i use this syntax.
0
 
LVL 33

Accepted Solution

by:
Exchange_Geek earned 250 total points
ID: 22766824
You need to have some thing common to those users (for example i am using customattribute1 common to all users in the following example)

$Users = Get-User | where {$_.customattribute1 -like "ABCD"}

Add-ADPermission -Identity:'Group Display Name -User "$Users" -AccessRights ReadProperty, WriteProperty -Properties 'Member' -deny

This worked on my lab.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
how to add IIS SMTP to handle application/Scanner relays into office 365.

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now