asked on

How to grant a user full right to a distribution list in Exchange 2010

Hello,

My PR team want to be able to send email out as the distribution list email address. Anyone able to give me the exact command to do it in exchange power shell? Thanks

Akhater

get-distributiongroup <name> | add-adpermission -user NameOfUser -AccessRights ExtendedRight -ExtendedRights "send as"

jli168

ASKER

hi- thanks for the response. I want to make sure i follow.

distrbition list = ir@abc.com (alias "ir")
user that want access = john@abc.com (alias "john")

If i have the above. I should be typing this in the command field?

get-distributiongroup ir | add-adpermission -user john -accessrights extenderight -extendedrights "full"

I want to grant the user full access.

ASKER CERTIFIED SOLUTION

Akhater

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

jli168

ASKER

I'm told that if i do "send as" recipient will get message as "send on behalf of" therefore i need full access.

Getting this when trying to grant full access.

[PS] C:\Windows\system32>get-distributiongroup xxxxxxx | add-adpermission -user xxxxxx -accessrights fullaccess
Cannot process argument transformation on parameter 'AccessRights'. Cannot convert value "fullaccess" to type "System.D
irectoryServices.ActiveDirectoryRights[]". Error: "Cannot convert value "fullaccess" to type "System.DirectoryServices.
ActiveDirectoryRights" due to invalid enumeration values. Specify one of the following enumeration values and try again
. The possible enumeration values are "CreateChild, DeleteChild, ListChildren, Self, ReadProperty, WriteProperty, Delet
eTree, ListObject, ExtendedRight, Delete, ReadControl, GenericExecute, GenericWrite, GenericRead, WriteDacl, WriteOwner
, GenericAll, Synchronize, AccessSystemSecurity"."
+ CategoryInfo : InvalidData: (:) [Add-ADPermission], ParameterBindin...mationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Add-ADPermission

Akhater

yes sorry right because FullAccess is with Add-Mailbox permission not Add-AdPermission my bad and thus can't be done on a group

SOLUTION

Postmaster

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

jli168

ASKER

Thank you guys, got it to work with the following

add-adpermission "IR" -user "john" -extendedrights "send as"