How can I allow a Security Group access to modify membership of ALL the Distribution Groups in my organization? For example, if someone calls the helpdesk to get on a DL. I don't want to add all the members of the helpdesk to the Managed By list. Not to mention the management of Add/Deletes. Please help. Thanks in advance. -James

Hi, You can delegate the management of the distribution group to a specific user, you can do it with powershell: Add-ADPermission -Identity <name of distribution group> -User <name of user> -AccessRights WriteProperty -Properties "Member" Best regardsBest Regards Don't forget to mark it as answer if it helps

Hi James, If you want someone to modify membership of all DGs(or cmdlet Add-DistributionGroupMember & Remove-DistributionGroupMember), you can assign the Distribution Groups Role to the user(USG). Distribution Groups Role http://technet.microsoft.com/en-us/library/dd876848.aspx Add a Role to a User or USG http://technet.microsoft.com/en-us/library/dd351056.aspx Frank Wang TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi James, Any updates?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I'm looking for a free/almost free membership management software to keep track of everything and is relatively easy to use, to help prepare for this. Nitric Oxide

Sorry. Apparently my notifications are not working. Thanks for the reply. This article looks like what I need Frank, but I tried the following and it is not working. EMS: New-RoleGroup -Name "FISD Distribution Group Management" -Roles "Distribution Groups" EMS: Add-RoleGroupMember "FISD Distribution Group Management" -Member "Domain Admins" I had one of my team (member of Domain Admins) go into Outlook 2010 and try to modify the membership of a Distribution Group. Got the same error as before that he did not have sufficient privileges.

Hi James, You can manage the DL in EMC & EMS as I said. If you want to manage group in Outlook 2010, please see: How to Manage Groups that I already own in Exchange 2010? http://blogs.technet.com/b/exchange/archive/2009/11/18/3408844.aspx Frank Wang TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Ok, I did not say in the beginning that I wanted to use Outlook to manage DL memberships, but yes, that is what I want to do. As I did state though, I do not want to add multiple users/groups to the "Managed By" list. In this scenerio we would have to add the group in question to each new DL when it was created. Is there no way that users could be assigned a role/permissions to do this and NOT be in the Managed By list?

Hi James... There are modifications in Exchange 2010 and one those is the manner as you will allow managers to manage a distribution group. You need to use RBAC for granting permissions. "If you want that all the owners of a distribution list can manage there own distribution list follow the steps below. With the great feature RBAC (Role Based Access Control) in Exchange 2010 we are able to give the users the right permissions to manage there own distribution lists. So we have more time to drink coffee." You will need to do a RBAC role and personalize because if you follow the article you will give permission for all users in the organization. After create a Role you will need to apply them just to the security group I suggest that you see this article: http://www.more2know.nl/2010/09/30/exchange-2010-sp1-unable-to-manage-distribution-groups/ http://blogs.technet.com/b/exchange/archive/2009/11/18/3408844.aspx MCP, MCSA, MCTS 7, MCITP SA, MCITP Messaging *Best Regards Don't forget to mark it as answer if it helps

RPeluffo, thanks, but that is not what I am looking for. I already have set owners to be able to modify their DL's. What I need now is to add a USG access to modify membership of ALL the DL's in my org without being a member of the "Managed By" list. Thanks.

Is this not possible in Exchange 2010? Anyone?

James, I'm pretty much in the same boat as you on this. It seems like Outlook 2010 in an Exchange 2010 environment is not capable of doing this. From my experience, even with every possible RBAC permission granted to someone they will not be able to manage the DL through Outlook 2010 UNLESS they are also listed under the "managed-by" for that distribution list. I don't know who designed it this way, or what they were thinking, but it seems like a very bad idea to me and a lot of tedious and unneccessary micro-management for distribution lists. If anyone can contradict the above statement, then please share your secret.

I'm just glad someone understands what I am talking about. There has to be some way to do it though. Me, as a domain/enterprise/schema admin and whatever else I have.....I CAN update any group even though I am not a member of "Managed By". Maybe there is hope?