MS Exchange – Grant permission to Distribution Groups in the GAL

February 3, 2015

Certain users in the organization where not able to edit (add / remove ) users from a Distribution group in the GAL.

This was the error they say in the Outlook.

“Changes to the public group membership cannot be saved …”

image

Nevertheless the user itself had Ownership ?

image

After Googling a bit, it seems that this is a dafault behavior of Exchange 2010 and higher.

So you need to change the Roles & Policies that are connected to the users, using the web ECP.

In order to allow the editing of the a Distribution Group from within Outlook.

image

Also the Membership Approval settings must be correct.

image

Next check the security settings via the ADUC on this Distribution Group Object. Make sure that this user has sufficient control.

image

Some more interesting readings are over here :

http://support.microsoft.com/kb/2586832/en-us#R1

http://blogs.technet.com/b/exchange/archive/2009/11/18/how-to-manage-groups-that-i-already-own-in-exchange-2010.aspx

You can of course use PowerShell to manage the Distribution Groups

Using : Get-ManagementRole cmdlet

“get-managementrole MyDistributionGroupMembership | get-member”

image

Advertisements