Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4703
  • Last Modified:

Exchange 2010 / 2005 give a user peremissions to edit GAL

Can someone tell me how to give our HR manager permissions to edit user information in AD (GAL) so he / she can update "address" and "Telephone" information.

What permissions does he / she need.

What tools will he / she need to get the job done.
2 Solutions
Vikas ShahCurrently Seeking OpportunitiesCommented:
Hey Hsoutter,

In order to provide a permission to your HR Manager for editing the GAL properties for any users, you need to provide them a rights from AD.

Please find the below mentioned link for the details information for assigning the permission for the same to a particular user with few Screenshot.


Do let me know if it helps you or not ?
Satya PathakLead Technical ConsultantCommented:

Unfortunately, the advice above doesn't apply to Exchange 2010. You could follow that, but Exchange 2010's RBAC feature gives a much easier, approved method of achieving this.

You'll need to make the users who should have this privilege a member of either the "Recipient Management" or "Help Desk" role groups. These grant various privileges, which would allow the user to make changes to certain settings for each user.

You can check more about the Recipient and Help Desk roles, and the specific privileges they grant at http://technet.microsoft.com/en-us/library/dd298028.aspx and http://technet.microsoft.com/en-us/library/dd876949.aspx, respectively.

If you wanted to get advanced, you could also create your own role groups, which would allow you to specifically define which actions the members of that group can take.

jsoutterAuthor Commented:

Thanks for the quick answer.

This looks more along the lines of what I need.

What is the best tool to give the user access to editing the information once he / she has the apropriate permissions?

Thans again!


Once they have the appropriate permissions, they should be able to make the changes using the Exchange 2010 Control Panel. You can get to that by going to https://mail.yourcompany.com/ecp (/ecp sub-directory on an Exchange 2010 Client Access Server).


Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now