exchange powershell

Posted on 2011-10-06
Last Modified: 2012-05-12
I'm trying to delegate control of a distribution list... easily done in earlier version of exchange.  The user has the "owner" rights on the DL properties page, but as i understand it i need to add specific AD privileges as well.  i'm running the powershell as administrator with the following command:

Add-ADPermission -Identity "List Name" -user "user's name" -accessrights WriteProperty -Properties "Member"

each time i try, it errors out with the following:

Active Directory operation failed on "domain controller name".  This error is not retriable.  Additional info: access is denied.

AD Response ... insuff_access_rights

i've read numerous posts that i need the inherited privileges from parent object check box checked, but that does not solve the issue.  any help is appreciated.
Question by:jhaff
    LVL 3

    Expert Comment

    Does the account you are using have the appropriate Exchange role Permissions? Organization Administrator role would for sure work...
    LVL 1

    Expert Comment

    Are you using Exchange 2010 or 2007? If you are using 2010 you need to use the -bypasssecuritygroupmanagercheck to be able to add a managedby person on the list. The managedby users should be able to manage the members of the list.
    If you are using 2007 you need to run something like this:
    add-adpermission -identity 'group' -User 'group manager' -AccessRights WriteProperty -Properties "Member"

    Hope this helps.

    Author Comment


    i'm in 2010 - the cmdlet you entered is exactly what i have in my post.  do i simply add the -bypasssecuritygroupmanagercheck to my cmdlet ?
    LVL 1

    Accepted Solution

    Set-DistributionGroup group -ManagedBy manger -BypassSecurityGroupManagerCheck

    this will allow the manager to manage group membership.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why spend so long doing email signature updates?

    Do you spend loads of your time carrying out email signature updates? Not very interesting are they? Don’t let signature updates get you down. Let Exclaimer Cloud - Signatures for Office 365 make managing email signatures a breeze.

    Email statistics and Mailbox database quotas You might have an interest in attaining information such as mailbox details, mailbox statistics and mailbox database details from Exchange server. At that point, knowing how to retrieve this information …
    Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
    In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
    In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now