Solved

Delegating GAL Editing to Users outside IT Dept

Posted on 2009-07-01
4
388 Views
Last Modified: 2012-05-07
We recently migrated from a Hosted 2003 Exchange to our own Exchange 2007.  Previously we had a user allowed to add contacts to the Globabl Address List and maintain the distribution lists.  He makes several changes a week as there are hundreds of external contacts in the GAL.

We are looking for a way to give him permission to add external contacts to the GAL without giving administrative access to the Exchange Server itself.
0
Comment
Question by:webfullcircle
  • 2
4 Comments
 
LVL 40

Expert Comment

by:Subsun
ID: 24755625
You may refer this article by Simon Butler (Exchange MVP)
http://www.amset.info/exchange/companycontacts.asp
0
 
LVL 65

Accepted Solution

by:
Mestha earned 500 total points
ID: 24759117
To maintain information in the GAL will require the user having fairly high permissions, which will include some basic Exchange permissions because the objects are Exchange enabled. It is one of the primary reasons why I recommend against storing external contacts in the GAL.

The user will require ADUC and Exchange management tools installed on to their machine, which means they will have access to the Exchange server, even if they only have Exchange View Only permissions.

Simon.
0
 
LVL 1

Author Comment

by:webfullcircle
ID: 24803074
What permissions will need to be added to the user for editing the gal?
0
 
LVL 40

Expert Comment

by:Subsun
ID: 24804271
User should have Exchange Recipient Administrator role for creating custom recipient. But this will allow user to manage all types of Recipients.
Refer : http://technet.microsoft.com/en-us/library/aa997220.aspx
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
This video discusses moving either the default database or any database to a new volume.

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question