How to Delegate Management of Distribution Group Membership to a User: Exchange 2007 Help

How to Delegate Management of Distr...

Collapse All

How to Delegate Management of Distribution Group Membership to a User

Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1

Topic Last Modified: 2008-01-30

This topic explains how to use the Exchange Management Shell to delegate the management of distribution group membership to a user.

Note:
You cannot use the Exchange Management Console to perform this procedure.

In Exchange 2007, the behavior of the Managed By property is different than in previous versions of Exchange. This property is an informational field that users see in Microsoft Office Outlook when viewing the properties of the distribution group. This property does not provide the user who is identified in the Managed By property with the ability to modify the members of that distribution group in Outlook. If you want to provide a user with the ability to modify distribution group membership, you must explicitly grant the required Active Directory directory service permissions by using the Add-ADPermission cmdlet. Specifically, this allows the user to modify the Member property of the distribution group.

Before You Begin

To perform this procedure, the account you use must be delegated the following:

Exchange Recipient Administrator role
Account Operator role for the applicable Active Directory containers

For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.

Procedure

To use the Exchange Management Shell to delegate management of distribution group membership to a user

Run the following command:

Add-ADPermission -Identity <name of distribution group> -User <name of user> -AccessRights WriteProperty -Properties "Member"

For example, to grant John Smith the right to add members to the Marketing Department distribution group, run the following command:

Add-ADPermission -Identity "Marketing Department" -User "John Smith" -AccessRights WriteProperty -Properties "Member"

For detailed syntax and parameter information, see the following topics:

For More Information

For more information about managing distribution groups, see Managing Distribution Groups.

For more information about managing recipients, see Managing Recipients.

Tags

: Add a tag

Flag as ContentBug

So... its easy to get a user to look after a group, but what about...?

Exchange_Numpty ... Thomas Lee | Edit | Show History

So... its easy to get a user to look after a group, but what about situations where a group of users might need access rights to manage the users listed in a group?

I need to add more than one user to be able to a number of groups. This covers instances where the main user-administrator is unavailable, perhaps through holidays or illness.

Add-ADPermission -Identity 'groupname' -user "domain\username" -AccessRights WriteProperty -Properties "Member" works for adding one user , but I cannot find a similar or even a dissimilar command that will allow me to add a group, rather than a user !!!

Your wisdom and experience would be appreciated !

regards,
Exchange Numpty

[tfl - 24 08 09] Hi - and thanks for your post.You should post questions like this to the Technet Forums at http://forums.microsoft.com/technet or the MS Newsgroups at

http://www.microsoft.com/communities/newsgroups/en-us/. You are much more likely get a quick response using the forums than through the Community Content. For specific help about:
Exchange : http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.exchange%2C&;;
SQL Server : http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.sqlserver%2C&;;
Windows : http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows%2C&;;
Windows Server : http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows.server%2C&;;
Virtual Server : http://groups.google.com/group/microsoft.public.virtualserver/topics?lnk
Full Public : http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public%2C&;;