Exchange 2010 / 2005 give a user peremissions to edit GAL

Posted on 2010-01-11
Medium Priority
Last Modified: 2012-05-08
Can someone tell me how to give our HR manager permissions to edit user information in AD (GAL) so he / she can update "address" and "Telephone" information.

What permissions does he / she need.

What tools will he / she need to get the job done.
Question by:jsoutter
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Expert Comment

by:Vikas Shah
ID: 26285815
Hey Hsoutter,

In order to provide a permission to your HR Manager for editing the GAL properties for any users, you need to provide them a rights from AD.

Please find the below mentioned link for the details information for assigning the permission for the same to a particular user with few Screenshot.


Do let me know if it helps you or not ?
LVL 20

Expert Comment

by:Satya Pathak
ID: 26285829
LVL 58

Accepted Solution

tigermatt earned 2000 total points
ID: 26286095

Unfortunately, the advice above doesn't apply to Exchange 2010. You could follow that, but Exchange 2010's RBAC feature gives a much easier, approved method of achieving this.

You'll need to make the users who should have this privilege a member of either the "Recipient Management" or "Help Desk" role groups. These grant various privileges, which would allow the user to make changes to certain settings for each user.

You can check more about the Recipient and Help Desk roles, and the specific privileges they grant at http://technet.microsoft.com/en-us/library/dd298028.aspx and http://technet.microsoft.com/en-us/library/dd876949.aspx, respectively.

If you wanted to get advanced, you could also create your own role groups, which would allow you to specifically define which actions the members of that group can take.


Author Comment

ID: 26286110

Thanks for the quick answer.

This looks more along the lines of what I need.

What is the best tool to give the user access to editing the information once he / she has the apropriate permissions?

Thans again!
LVL 58

Assisted Solution

tigermatt earned 2000 total points
ID: 26309757


Once they have the appropriate permissions, they should be able to make the changes using the Exchange 2010 Control Panel. You can get to that by going to https://mail.yourcompany.com/ecp (/ecp sub-directory on an Exchange 2010 Client Access Server).


Featured Post

10 Questions to Ask when Buying Backup Software

Choosing the right backup solution for your organization can be a daunting task. To make the selection process easier, ask solution providers these 10 key questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
New style of hardware planning for Microsoft Exchange server.
This video discusses moving either the default database or any database to a new volume.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses
Course of the Month12 days, 22 hours left to enroll

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question