Solved

Possible to give permission to specific user to make changes to Global Address List entries on Exchange 2007?

Posted on 2009-06-29
4
711 Views
Last Modified: 2012-05-07
I was wondering if it is possible to delegate out permissions for the Exchange 2007 Global Address List. My primary reasoning is because we have a large number of users to update personal information (street, phone number, etc...) on and this would take up much of the IT department's time. We would like to be able to delegate this permission to one of the receptionists if possible - does Exchange allow this or something similar so I can enlist the aid of a coworker to help update entries?
0
Comment
Question by:danielevans83
  • 2
4 Comments
 
LVL 13

Accepted Solution

by:
shadowlesss earned 500 total points
Comment Utility
Add the user to the Exchange Recipient Administrator Role but before you do this be sure you know what other changes this user can make

ref- http://technet.microsoft.com/en-us/library/aa996881.aspx

Exchange Recipient Administrators Role
The Exchange Recipient Administrators role has permissions to modify any Exchange property on an Active Directory user, contact, group, dynamic distribution list, or public folder object. During Exchange Setup /PrepareAD, the Exchange Recipient Administrator role is created in the Microsoft Exchange Security Groups container in Active Directory. This role also lets you manage Unified Messaging mailbox settings and Client Access mailbox settings. Members of the Exchange Organization Recipient Administrators role have the following permissions:

Read access to all the Domain User containers in Active Directory that have had Setup /PrepareDomain run in those domains.

Write access to all the Exchange specific attributes on the Domain User containers in Active Directory that have had Setup /PrepareDomain run in those domains.

Membership in the Exchange View-Only Administrator role.

Users who are members of the Exchange Recipient Administrators role will not have permissions to Domains where Setup /PrepareDomain has not been run. When you add a new Exchange domain, make sure that you run Setup /PrepareDomain in the new domain to grant permissions to the Exchange administrator roles in that domain.

0
 

Author Comment

by:danielevans83
Comment Utility
Will I also have to remote desktop them to the Exchange server and log them into EMC? Or can they make these GAL modifications from Outlook? This will be a short term temporary thing and she will be watched to make sure she is not fooling around with anything else.
0
 
LVL 13

Assisted Solution

by:shadowlesss
shadowlesss earned 500 total points
Comment Utility
You could install the Exchange 2007 Management Tools on the user machine...
http://www.petri.co.il/installing_exchange_2007_management_tools_on_a_32bit_os.htm
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
exchange 2 32
Exchange 2016, moving a mailbox after suspending the move 2 11
EXCHANGE 6 22
Exchange in VMware 14 48
Easy CSR creation in Exchange 2007,2010 and 2013
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now