Link to home
Create AccountLog in
Exchange

Exchange

--

Questions

--

Followers

Top Experts

Avatar of Eric Jack
Eric Jack🇺🇸

Manager of security group can't add members
We're using Exchange 2013 and Outlook 2013. From the exchange server, I checked the settings in two places:

Exchange Admin Center
Recipients > Groups > Distro Group in Question > 
On the Ownership tab, the user is listed in the Owners section.
In the Membership Approval tab, join and leave are set to "Closed", which says "Members can be added only by the group owners"

In Active Directory Users and Computers
Groups > Distribution Groups > Distro Group in Question > 
Managed By tab, the user is listed in the Name field for ownership, and the "Manager can update membership list" box is checked.

However, when the user/owner goes to the Outlook Address Book, opens the distribution group, Modify Members, Add, select user from list, OK... the error pops up:

"Changes to the public group membership cannot be saved. You do not have sufficient permission to perform this operation on this object."

What am I missing?

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of Shaun VermaakShaun Vermaak🇦🇺

Check Security > Advance Security > Effective Permissions
Do you have deny rules anywhere?

ASKER CERTIFIED SOLUTION
Avatar of Vijaya Babu SekarVijaya Babu Sekar🇮🇳

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account

Avatar of Eric JackEric Jack🇺🇸

ASKER

Check Security > Advance Security > Effective Permissions
Do you have deny rules anywhere?

I don't see that, where should I look?

You can turn this feature back on in Exchange 2010 or Exchange 2013 for all users by simply enabling the MyDistributionGroups setting on the Default Role Assignment Policy.

Bingo! That looks like it. However, is there any way to allow the owners to add/remove users to their groups without giving them the rights to add and delete groups themselves?

Avatar of Raheman M. AbdulRaheman M. Abdul🇬🇧

I had solved this issue earlier and I agree with Vijaya Babu Sekar. That will fix.

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


Avatar of Shaun VermaakShaun Vermaak🇦🇺

If so, please endorse his comment by clicking "Thumbs Up" icon

Avatar of Eric JackEric Jack🇺🇸

ASKER

Please reread my second post.

Shaun, I didn't know what you wanted me to check.

Vijaya, that would work, but I don't want to give that much permission. I want to give only a portion of that permission.

Avatar of Shaun VermaakShaun Vermaak🇦🇺

Sorry, Eric, my comment was to Raheman to endorse the comment he agrees with

Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of Eric JackEric Jack🇺🇸

ASKER

So... to follow up: Is there a way to grant access to a user to add/remove members without also granting them the ability to create/delete distribution groups?

Avatar of Shaun VermaakShaun Vermaak🇦🇺

#a42093637 is a working solution

Avatar of Eric JackEric Jack🇺🇸

ASKER

#a42093637 is a working solution

Yes, it fixes the initial problem, but it gives too much permission. Nobody responded to my follow-up, which is why I never closed this thread.

Bingo! That looks like it. However, is there any way to allow the owners to add/remove users to their groups without giving them the rights to add and delete groups themselves?

So... to follow up: Is there a way to grant access to a user to add/remove members without also granting them the ability to create/delete distribution groups?

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


Avatar of Shaun VermaakShaun Vermaak🇦🇺

Yes, it fixed your initial problem. Ask follow-up in new question, otherwise questions might never get closed
Exchange

Exchange

--

Questions

--

Followers

Top Experts

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.