How to managing shared calendar in Exchange

We are an Exchange 2010 environment.  I need to manage a resource mailbox calendar for a large group of people.  The ideal way would be through a Dynamic Dist list but these cannot be used for giving access to a mailbox folder. Any creative thought on how to manage this so that new users that are part of a given OU automatically get rights to the folder?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
Most effective way to accomplish this would be to create a Universal Mail Enabled Security Group. This way you can add your users to this security group and apply Full Access permissions to the Resources mailbox. This way every time you want to add someone to this you just add them to the Mail Enabled Universal Distribution Group.

Just make sure that when you create the security Group you need to make sure that it is set to Universal for the Group Scope and Group Type is Security.

You need to create this from Active Directory Users and Computers.

Done this many of times, most efficient for management.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Agreed entirely with Will's comments.

Any creative thought on how to manage this so that new users that are part of a given OU automatically get rights to the folder?
OUs cannot be used for assigning security permissions to their members. They are for logically arranging objects in the directory server, can have GPOs applied to them, and nothing much more.

If you need users in an OU to automatically inherit particular groups (i.e. you follow Will's suggestion and use a group to grant these permissions), then you need to define a user creation process. This is a policy-based decision, not a technical one.

However, the easiest way to implement such a process is to create a disabled "template user" in the OU in question with all the necessary group memberships. Creating a new user is then a case of right-click -> Copy and fill in the necessary details. This doesn't solve the problem of moving an existing user into the OU, for which you would need scripts / third-party tools / manual intervention to ensure the permissions are maintained correctly.
jtomascakAuthor Commented:
Thanks.  Using a universal group is how I am currently doing it.  I have 38 user OS's each with a different shared calendar.  Was hoping to reduce the manual step (and minimize errors).

Thanks anyway.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.