Modify Global Address List Through Outlook

I have a Windows Server 2003 R2 Native domain.  I am running Exchange 2007 Enterprise.  I recently had a request to add a couple of email groups to the GAL, which also need to be modified on occasion by non-admin users through Outlook.  I read that the 'managed by' section of the list properties is the correct place to set this up.  After setup, all appears to be working properly.  However, I noticed my test user (domain users group only) can modify any of the lists in my GAL, not just those that the user is defined in the 'managed by' section.  Why does this user, and I presume all my users, have rights to modify lists and where can I change this?
engstromrAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

seb_ackerCommented:
Hi
Did you actually noticed that you can change any group AND SAVE the modifications ??? Cause in fact you can modify any group membership from outlook, until you try to apply the changes..

Number of support tickets are opened for that problem, so begin to check that you really can modify the groups and SAVE the changes.
0
engstromrAuthor Commented:
Yes, I can modify and save.  On one machine, I login as a domain users with no other group membership and I can add users to a list and save it.  I then checked on another machine and the change shows up immediately.
0
seb_ackerCommented:
Did you modify some permissions into the AD structure or via adsiedit.msc ?
check the advanced security on the group (ad object), to see if some users or groups have the permission to modify, that they should not have
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
engstromrAuthor Commented:
I have all my groups in a single OU.  At some point during testing, I must have delegated rights to my test user.  This is why my test user was able to save.  I created a second test user and I am unable to save.  Thanks for the suggestions.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.