Problem delegating management of distribution group in Exchange 2007
I have followed the steps listed in the following article but user is still not able to add or modify a newly created universal distribution group.
http://technet.microsoft.com/en-us/library/cc164350(EXCHG.80).aspx
Current Enviroment:
Mixed Exchange 2007 and 2003. Sever role deployed: 1 CAS, 2 HUB, 2 MB (SCC).
Exchange 2007 is on SP2.
Distribution Group was created on Exchange 2007 Mgmt Console, added Add-ADPermission in PowerShell for the user. When user try to modify the new distribution group, will get error "Changes to distribution list membership cannot be saved. You do not have
sufficient permission to perform this operation on this object".
I have verfiy the object in AD and in PowerShell that the user does have the write permission yet still getting error. What else can I try next? Please advise.
Ken
April 30th, 2010 10:58am
Does the account have Exchange rights?
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.
"Ken4x5" wrote in message
news:b23fa03f-bec2-442c-ac0f-c124c2bd537e...
I have followed the steps listed in the following article but user is still not able to add or modify a newly created universal distribution group.
http://technet.microsoft.com/en-us/library/cc164350(EXCHG.80).aspx
Current Enviroment:
Mixed Exchange 2007 and 2003. Sever role deployed: 1 CAS, 2 HUB, 2 MB (SCC).
Exchange 2007 is on SP2.
Distribution Group was created on Exchange 2007 Mgmt Console, added Add-ADPermission in PowerShell for the user. When user try to modify the new distribution group, will get error "Changes to distribution list membership cannot be saved. You do not have
sufficient permission to perform this operation on this object".
I have verfiy the object in AD and in PowerShell that the user does have the write permission yet still getting error. What else can I try next? Please advise.
Ken
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Free Windows Admin Tool Kit Click here and download it now
April 30th, 2010 8:39pm
You mean the account I used to perform the Add-ADPermission?? Yes it does.
May 3rd, 2010 3:20pm
Please try the methods below, and see if the issue can still be reproduced:
1.
Add-ADPermission -Identity "Distribution Group Name" -User "Name of Manager" -AccessRights GenericAll
2.
Add-ADPermission -Identity "Distribution Group Name" -User "Name of Manager" -AccessRights "WriteProperty" -ExtendedRights "Add/Remove self as member"James Luo
TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx)
If you have any feedback on our support, please contact tngfb@microsoft.com
Free Windows Admin Tool Kit Click here and download it now
May 7th, 2010 12:31pm