I'm trying to give multiple individuals (2-3 max) the ability to manage a distribution group and was wondering if this if this is possible without the use of a security group? When we were running Exchange 2003 we would use the Security tab of the given DL in AD and just assign the additional users the required access; however it's my understanding that it's best to avoid modifying objects created using Exchange 2007 using any 2003 interface (albeit Exchange or AD) correct?

In general, it is best to avoid managing Exchange 2007/2010 objects with the Active Directory tools. However, it is fairly safe to manage mail-enabled group membership using Active Directory Users and Computers. -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "Chance Dailey" wrote in message news:b5efa4c0-a679-4802-9bd4-cc7b6ead4c51... I'm trying to give multiple individuals (2-3 max) the ability to manage a distribution group and was wondering if this if this is possible without the use of a security group? When we were running Exchange 2003 we would use the Security tab of the given DL in AD and just assign the additional users the required access; however it's my understanding that it's best to avoid modifying objects created using Exchange 2007 using any 2003 interface (albeit Exchange or AD) correct? Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

In general, it is best to avoid managing Exchange 2007/2010 objects with the Active Directory tools. However, it is fairly safe to manage mail-enabled group membership using Active Directory Users and Computers. -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "Chance Dailey" wrote in message news:b5efa4c0-a679-4802-9bd4-cc7b6ead4c51... I'm trying to give multiple individuals (2-3 max) the ability to manage a distribution group and was wondering if this if this is possible without the use of a security group? When we were running Exchange 2003 we would use the Security tab of the given DL in AD and just assign the additional users the required access; however it's my understanding that it's best to avoid modifying objects created using Exchange 2007 using any 2003 interface (albeit Exchange or AD) correct? Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." So are you suggesting that the only other way, aside from using ADUC, be to use security groups?

On Tue, 27 Apr 2010 17:56:08 +0000, Chance Dailey wrote: [ snip ] >So are you suggesting that the only other way, aside from using ADUC, be to use security groups? You can use Poweshell to do this: get-group <group-name> | add-adpermission -user <user> -accessright writeproperty -properties member --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

I'm trying to give multiple individuals (2-3 max) the ability to manage a distribution group and was wondering if this if this is possible without the use of a security group? When we were running Exchange 2003 we would use the Security tab of the given DL in AD and just assign the additional users the required access; however it's my understanding that it's best to avoid modifying objects created using Exchange 2007 using any 2003 interface (albeit Exchange or AD) correct? Hi, if you are talking about the "Manager" of the Distribution List which is known as "ManagedBy" attribute then you can modify it using the set-group command like this in EMS set-group dlName -ManagedBy user1@domain.com,user2@domain.com RegardsLaeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

Hi, Failed run the cmd set-group dlName -ManagedBy user1@domain.com,user2@domain.com Success run the cmd set-group dlName -ManagedBy user1@domain.com

On Mon, 14 Feb 2011 04:50:38 +0000, Suriya25 wrote: >Failed run the cmd > >set-group dlName -ManagedBy user1@domain.com,user2@domain.com > >Success run the cmd > >set-group dlName -ManagedBy user1@domain.com There can be only one 'manager'. If your intention is to have multiple users be able to modify the membership of the group then use ADUC to allow the user to modify the "member" property (or use the Add-ADPermission cmdlet to do that). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Exchange 2007 added an attribute to the schema called msExchCoManagedByLink where the additional group managers can be kept. I'm not sure how this field gets populated other than through ADSIEdit. David