I have end-users who can modify the Distribution Groups in Exchange 2007 using their Outlook client. I would like to lock this down so only the Sr. Network Engineer & myself can make modifications. How would I accomplish this?

Its not default behavior that anybody can modify the distribution groups. Seems something wrong with permissions. Check the properties of the distribution group in AD -> Security Tab and make sure not everyone has access to Edit the distribution group. Once done, add yourself in the ManagedBY tab and enabled the check box against "Manager can update the membership" Goto Security tab, add your N/w engineer account with Write Exchange Information permissions

Its not default behavior that anybody can modify the distribution groups. Seems something wrong with permissions. Check the properties of the distribution group in AD -> Security Tab and make sure not everyone has access to Edit the distribution group. Once done, add yourself in the ManagedBY tab and enabled the check box against "Manager can update the membership" Goto Security tab, add your N/w engineer account with Write Exchange Information permissions

hi, Please use the cmd to get the adpermission of the DL: get-adpermission -identity "YOUR DL Name" | where {($_.accessrights -like "writeproperty")} | fl accessrights, user See if you can see the user. If you can, please remove the permission for the user. If you see other users that you want to let them modify the DG, you can also remove the permission for them. Please use the below cmd to remove the permission: remove-adpermission -identity "Your DG Name" -user "User name" -accessrights writeproperty -properties "member" hope can help you thanks, CastinLu TechNet Community Support