Delegation Control and GAL

[woodlandsprep]

First off it's killing me to ask such as easy question, but I just can't fidn the answer. We're running Exchange 2003 SP2 and I've been asked to allow certain users to edit and maintain the contacts through their Outlook Clients. So far since it what I've done, I went into the Delegation Control Wizward and added the selected users, and set them as Exhange Administrators, now I logged into the network with that users account and opened Outlook, went to global address list, chose a contact, right click, edited it.. and BOOM, you do not have access to change this list. The users are also members of administrators - built, any ideas???

Much Appreciated!

 

[WhoKilledKenny]

Contacts in the GAL are Active Directory objects. Remove the clients for Exchange Admins!!!

Suggestions:
Using ADUC (Exchange tool) create an OU that houses and manages contact objects. Delegate control of the OU via a security group. Then do the following:
1. Create an MMC from the OU level and distribute it to the clients, train them on how to create a contact in AD.
-or-
2. (what I would do...) Build a web front-end that can create and modify contact objects in the OU. Make sure the page is setup to authenticate the user.

Jesse Hamrick

http://www.powershellpro.com

 

[woodlandsprep]

so the user would be required to join what group?

 

[WhoKilledKenny]

I would create a new security group and delegate that group only to the OU within Active Directory. Add the users to the new group.

Jesse Hamrick

http://www.powershellpro.com