Exchange 2010 Distribution Group Woes

[Paperlantern]

We just upgraded to Exchange 2010, prior to the upgrade, while we were still on 2007, all members of IT had the ability to edit distribution groups in the organization right from their global address book in outlook. They could click modify members, and do so. However now, after the upgrade, it presents the error:

"Changes to the distribution list membership cannot be saved. You do not have sufficient permission to perform this operation on this object."

I can still log into the EMC on the server as "Administrator" and edit the disty groups when requested by a user. I can also log into the EMC when logged onto the server as my own domain account, and freely modify the lists. So I am not understanding why I cant perform the same operation from Outlook. It's not life or death here, I'm just trying to understand why someone designated as an Exchange Organization Administrator cannot modify the disty lists from outlook anymore. It's just slightly more inconvenient to have to remote desktop to a server to make such quick changes.

I did find some information about the error, but its about people being able to modify "their own distribution groups". We dont have any disty groups here that are owned really by anyone, they are all created by IT members when requested or needed, and modified by members of IT. We've never needed to log into the server to edit members of these lists until now.

 

[Paperlantern]

Bump. Anyone?

 

[Lifted]

Why not install the Exchange console and shell on your workstations? Though that might not be the best idea with regards to security if you have everyone as a member of Exchange Org Admins group.

As far as making the changes via outlook, i can't help you there, as I would never place my, or anyone else's, normal user account in an exchange admin group. I instead use 'run as' on the EMC or shell and do what I need to, using an account in the Org Mgmt group, then close it.

 

[shurato]

Try this. I had to do this on my server to allow end-users to manage distro groups.
I believe the user has to login via outlook webapp to modify membership.

http://sysadmin-talk.org/2010/06/om...ribution-group-membership-in-exchange-2010-2/

 

[Nothinman]

Did you check the settings on the Membership Approval setting of the DGs?

 

[blurredvision]

I would think you could just add all users to the "Managed By..." in each dist group. That should give them sufficient privileges again. Here's a more in-depth article that I don't think is really required, you should be able to just skip to step 4:

http://www.more2know.nl/tag/exchange-2010-distribution-group-managed-by/

In managing dist groups myself, I've just added them to the "managed by" list and let the user have at it. If you want anybody to be able to manage any group, I'm assuming you can just add the Domain Users group and be done with it.