Distribution Lists Permissions - E2003 Newbie Question 1

[beckas]

How do I give users the ability to modify members of Global Address Book distribution lists in Exchange 2003? I'm assuming that I do this on the distribution list object's security tab in ADUC but I'm not sure what type of permission that I need to grant.

Thanks much for your responses!

 

[b00bies]

if i understand what you want to do...what we do is identify a user in the DL that will be responsible for the admin of adding and removing ppl to and from the DL. we make them the owner. so when you view the DL, in the managed by tab we add the person there. don't know if thats 'best practice' but it helps us unload the grunt work to ppl who want to control their groups.

 

[beckas]

Thanks for your reply. In Exchange 5.5, I could give multiple people the rights to edit members of distribution lists. It looks like I can only give one person the permission via the "managed" tab in ADUC. So does that mean that only one person can have the rights to edit members of distribution lists?

 

[b00bies]

i've never tried adding a group.

i think to add a group instead of a user, use the security tab - advanced button - proporties tab - then give the user read/write memberof permission. but thats just a guess off the top of my head like i said i never tried it, but it should be in there somewheres.

 

[xmsre]

The "managed by" field is a text tag. You have to use the security tab to assign permissions. Even then you can have issues. Remember, the membership of a universal group is stored in the GC partition, however you can only write to a writable partition. If the group exists in one domain and the user attempting to edit it exists in another, this can be a problem.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;281489

http://support.microsoft.com/default.aspx?scid=kb;en-us;306349

 

[beckas]

Thanks xmsre. KB article 281489 is just what I was looking for.

 

[almaragni]

I saw the thread and article and it looks good. However, I have an additional requirement that doesnt fit the mold.

We have DLs which include users and contacts. We wish to be able to delegate the list maintenance as well as the ability to add/modify contacts for that DL.

Do you have a suggestion or reference doc?
THank you