Solved

Delegating GAL Editing to Users outside IT Dept

Posted on 2009-07-01
4
389 Views
Last Modified: 2012-05-07
We recently migrated from a Hosted 2003 Exchange to our own Exchange 2007.  Previously we had a user allowed to add contacts to the Globabl Address List and maintain the distribution lists.  He makes several changes a week as there are hundreds of external contacts in the GAL.

We are looking for a way to give him permission to add external contacts to the GAL without giving administrative access to the Exchange Server itself.
0
Comment
Question by:webfullcircle
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 40

Expert Comment

by:Subsun
ID: 24755625
You may refer this article by Simon Butler (Exchange MVP)
http://www.amset.info/exchange/companycontacts.asp
0
 
LVL 65

Accepted Solution

by:
Mestha earned 500 total points
ID: 24759117
To maintain information in the GAL will require the user having fairly high permissions, which will include some basic Exchange permissions because the objects are Exchange enabled. It is one of the primary reasons why I recommend against storing external contacts in the GAL.

The user will require ADUC and Exchange management tools installed on to their machine, which means they will have access to the Exchange server, even if they only have Exchange View Only permissions.

Simon.
0
 
LVL 1

Author Comment

by:webfullcircle
ID: 24803074
What permissions will need to be added to the user for editing the gal?
0
 
LVL 40

Expert Comment

by:Subsun
ID: 24804271
User should have Exchange Recipient Administrator role for creating custom recipient. But this will allow user to manage all types of Recipients.
Refer : http://technet.microsoft.com/en-us/library/aa997220.aspx
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Read this checklist to learn more about the 15 things you should never include in an email signature.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
This video discusses moving either the default database or any database to a new volume.

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question