I have a resource forest for Exchange 2007 which has trusts with many other forests. The user accounts live in the account domains and they have linked mailboxes in our domain. When I try to add users as managers of distribution groups they cannot modify the membership. I reveiwed the effective permissions on the distribution list and the account forest account does not have the write member permission. the disabled account in the resource forest has the permission. I know I can manually add user from the account forest but is this by design or should this allow the user from the external domain be able to modify group membership? RayRay Skweres

you have to change the permission for the user who has to mange the membereship of a distribution group. The command for Exchange 2007 is Add-ADPermission –identity DistributionGroup –User owner –AccessRights WriteProperty –Properties “Member” if a trust is established between your resource ans account domain you can use the accounts of your account dmain in your resource domain. regards Thomas Paetzold visit my blog on: http://sus42.wordpress.com