Exchange 2007 Distribution Groups: How to assign multiple managers
I'm trying to give multiple individuals (2-3 max) the ability to manage a distribution group and was wondering if this if this is possible without the use of a security group? When we were running Exchange 2003 we would use the Security tab of the given DL in AD and just assign the additional users the required access; however it's my understanding that it's best to avoid modifying objects created using Exchange 2007 using any 2003 interface (albeit Exchange or AD) correct?
April 27th, 2010 12:22pm

In general, it is best to avoid managing Exchange 2007/2010 objects with the Active Directory tools. However, it is fairly safe to manage mail-enabled group membership using Active Directory Users and Computers. -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "Chance Dailey" wrote in message news:b5efa4c0-a679-4802-9bd4-cc7b6ead4c51... I'm trying to give multiple individuals (2-3 max) the ability to manage a distribution group and was wondering if this if this is possible without the use of a security group? When we were running Exchange 2003 we would use the Security tab of the given DL in AD and just assign the additional users the required access; however it's my understanding that it's best to avoid modifying objects created using Exchange 2007 using any 2003 interface (albeit Exchange or AD) correct? Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Free Windows Admin Tool Kit Click here and download it now
April 27th, 2010 12:35pm

In general, it is best to avoid managing Exchange 2007/2010 objects with the Active Directory tools. However, it is fairly safe to manage mail-enabled group membership using Active Directory Users and Computers. -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "Chance Dailey" wrote in message news:b5efa4c0-a679-4802-9bd4-cc7b6ead4c51... I'm trying to give multiple individuals (2-3 max) the ability to manage a distribution group and was wondering if this if this is possible without the use of a security group? When we were running Exchange 2003 we would use the Security tab of the given DL in AD and just assign the additional users the required access; however it's my understanding that it's best to avoid modifying objects created using Exchange 2007 using any 2003 interface (albeit Exchange or AD) correct? Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." So are you suggesting that the only other way, aside from using ADUC, be to use security groups?
April 27th, 2010 1:56pm

On Tue, 27 Apr 2010 17:56:08 +0000, Chance Dailey wrote: [ snip ] >So are you suggesting that the only other way, aside from using ADUC, be to use security groups? You can use Poweshell to do this: get-group <group-name> | add-adpermission -user <user> -accessright writeproperty -properties member --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
April 27th, 2010 11:08pm

I'm trying to give multiple individuals (2-3 max) the ability to manage a distribution group and was wondering if this if this is possible without the use of a security group? When we were running Exchange 2003 we would use the Security tab of the given DL in AD and just assign the additional users the required access; however it's my understanding that it's best to avoid modifying objects created using Exchange 2007 using any 2003 interface (albeit Exchange or AD) correct? Hi, if you are talking about the "Manager" of the Distribution List which is known as "ManagedBy" attribute then you can modify it using the set-group command like this in EMS set-group dlName -ManagedBy user1@domain.com,user2@domain.com RegardsLaeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com
April 28th, 2010 7:37am

Hi, Failed run the cmd set-group dlName -ManagedBy user1@domain.com,user2@domain.com Success run the cmd set-group dlName -ManagedBy user1@domain.com
Free Windows Admin Tool Kit Click here and download it now
February 13th, 2011 11:50pm

On Mon, 14 Feb 2011 04:50:38 +0000, Suriya25 wrote: >Failed run the cmd > >set-group dlName -ManagedBy user1@domain.com,user2@domain.com > >Success run the cmd > >set-group dlName -ManagedBy user1@domain.com There can be only one 'manager'. If your intention is to have multiple users be able to modify the membership of the group then use ADUC to allow the user to modify the "member" property (or use the Add-ADPermission cmdlet to do that). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
February 14th, 2011 12:06am

Exchange 2007 added an attribute to the schema called msExchCoManagedByLink where the additional group managers can be kept. I'm not sure how this field gets populated other than through ADSIEdit. David
Free Windows Admin Tool Kit Click here and download it now
February 10th, 2012 1:00pm

If you using security groups you can run this command Add-ADPermission -identity "<mailbox>" -User "<name of securitygroup>" -AccessRights WriteProperty -Properties "Member"
September 17th, 2012 8:05am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics