Any user can edit members of all distribution lists

[paulexander]

We are running Exchange 2003, and we have an odd issue with our distribution lists.

It appears that any user can edit the members of any of our distribution lists.

With Outlook (2003), All they need to do is open the GAL, select any DL, then using the "Modify Members" button, add and remove anyone they want. I've verified this by logging on separately as a regular user, modified various DL's and then verified the change in Active Directory.

I reviewed the permissions on the various groups, and nothing is jumping out at me. no Special permissions that i can see

Is there some other Global setting that I am unaware of?

This is very odd...

thanks

-Paul

 

[58sniper]

Who's listed as the manager of the DL?

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[paulexander]

Most of the DL's have individual managers in charge of each group. No one person has been delegated that role.

Some of the DL's have no one listed as the manager.

 

[paulexander]

I just dug a little deeper, and found one new bit of information that I missed before:

I just discovered a group called "Pre-Windows 2000 Compatible Access", and found that it appears to have both "Everyone" and "Authenticated users" as its members. This group has FULL CONTROL over all of the DL's that I have sampled.

What is this group, and can I safely "tweak" it or should I just remove it?

 

[Xemus]

Do not remove it. It is there for backwards compatibility reasons.

You most likely can move folks out of the group tho, unless you have some really old systems or applications (pre-Active Directory).

http://www.left-brain.com/tabId/65/...Active-Directory-A-System-Administrators.aspx

http://www.closedsocket.com