I have a Windows Server 2003 R2 Native domain. I am running Exchange 2007 Enterprise. I recently had a request to add a couple of email groups to the GAL, which also need to be modified on occasion by non-admin users through Outlook. I read that the 'managed by' section of the list properties is the correct place to set this up. After setup, all appears to be working properly. However, I noticed my test user (domain users group only) can modify any of the lists in my GAL, not just those that the user is defined in the 'managed by' section. Why does this user, and I presume all my users, have rights to modify lists and where can I change this?