On exchange server 2007, I want to create a distribution group that is only visible/can only be used by some specific users. Also, is it possible for those users to add/remove members to the distribution group from their outlook clients? If possible, please let me know how I can configure this scenario. Thanks

It's very hard, probably impractical, to control who can see a distribution group in the GAL. It's easy to control who can send to it. As to self-service, I don't know a native way to do this in Exchange 2007. Exchange 2010 handles this kind of thing much better with the Exchange Control Panel.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

How can you define who can send to the distribution group?

On the properties sheet for the Distribution Group, Mail Flow Settings, Message Delivery Restrictions. Defaults are Accept messages from All Senders, Require that all senders are authenticated. This means no users from outside your organization can send to the DG. On the properties sheet you can specify whom you want to allow and / or reject. You can very well have your users mange your DGs. You could also specify who is allowed to view the DG an address list. This would require some sort of address list segregation. But I agree with Ed Crowley: Would not recommend it. Giving User Enough Rights To Manage Distribution Group In Exchange 2007 http://www.howexchangeworks.com/2009/09/giving-user-enough-rights-to-manage.html White Paper: Configuring Virtual Organizations and Address List Segregation in Exchange 2007 http://technet.microsoft.com/en-us/exchange/bb936719(EXCHG.80).aspx MCTS: Messaging | MCSE: S+M

Hi, The transport rule can also help you to restrict who can send the email to the group. Getting to know Transport Rules in Exchange 2007: http://technet.microsoft.com/en-us/library/bb421708(EXCHG.80).aspx How to Use Transport Rules in Exchange Server 2007: http://www.msexchange.org/tutorials/Transport-Rules-Exchange-Server-2007.html Exchange 2003 Transport Rules: http://www.msexchange.org/tutorials/Exchange-2007-Transport-Rules.html Best regards, SerenaPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks for the info!!. I have another problem now. In the properties of the distribution group, in the "managed by" filed, I put a group that contains 3 users (me and 2 other people), but when I try to add/remove members from the distribution group from the PCs of those 3 users, using outlook, I get the message "Changes to the distribution list membership cannot be saved. You do not have sufficient permission to perform this operation on this object". Do I have to configure the permissions anywhere else, apart from setting the manager of the distribution group? Thnks.

You'll have to do this in Active Directory User and Computers. On the tab Manged By, select Manager can update membership list. See also: Exchange 2007 Distribution Group Manager not able to do anything http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/fc89cd92-b6b2-4786-8f4d-139b5789b378/MCTS: Messaging | MCSE: S+M

On Thu, 20 Jan 2011 08:20:32 +0000, Jon-Alfred Smith wrote: > > >You'll have to do this in Active Directory User and Computers. On the tab Manged By, select Manager can update membership list. See also: Or use ADIC and give the user/group the "write members" permission, making sure that you select "This object only" in the "Apply onto" drop-down listbox. The UI is convenient, but it only lets you select one object. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP