Users of Outlook can modify mail group members by right clicking on the link to the recipient group and going to properties. How can I restrict this? I just want the admins to be able to modify group membership.

Hello Steve, If you are using Exchange 2003 then go to the properties of DL in ADU&C -> Managed By -> Untick Manager can update membership list. This will remove the rights of manager to add/remove the member of group. Internally it will remove the write property permission from manager account. Additionally remove the full control permission if somebody has on that DL which is not supposed to be there.

Thanks Amit but we're on Exchange 2007

In that case you need to remove WriteProperty permission with Remove-ADPermission command. Remove-ADPermission http://technet.microsoft.com/en-us/library/aa996048(EXCHG.80).aspx You can see existing permissions with Get-ADPermission. Get-ADPermission http://technet.microsoft.com/en-us/library/bb125183(EXCHG.80).aspx

Hi Steve, By default, a user could not modify the members of a group except you have done the steps in the following article: How to Delegate Management of Distribution Group Membership to a User http://technet.microsoft.com/en-us/library/cc164350(EXCHG.80).aspx All members can add/remove member from the list in group properties, but when they click ok, the modification cant be saved. Hope this helps. Elvis