Unable to manage Distribution Lists
- Users in a child domain get access denied when they try and change the membership of distribution lists (through Outlook). They have been granted write access to 'members' property.
These users can modify the membership if they use Active Directory Users and Computers, but not if they use Outlook.- Changed TypeAdoyt Friday, November 06, 2009 6:15 PM
Answers
- On Fri, 6-Nov-09 18:11:49 GMT, Adoyt wrote:
>Users in a child domain get access denied when they try and change the membership of distribution lists (through Outlook). They have been granted write access to 'members' property.These users can modify the membership if they use Active Directory Users and Computers, but not if they use Outlook.
Whether they can modify the contents of a DL from Outlook depends on
which Global Catalog server Outlook is using. If it's using a GC on a
DC in the same AD domain it shold work. If Outlook is using a GC on a
in then it won't work.
The mailbox and DL need to be in the same AD domain, and the GC used
by Outlook needs to be in that same AD domain. If this isn't the case
then Outlook is using a GC that has a read-only copy of the directory
data.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
All Replies
- it's always been recommended that Distribution Groups be created as "Universal"-scope groups...
Susan Conkey [MVP] - Thanks for the reply. They are Universal.
- On Fri, 6-Nov-09 18:11:49 GMT, Adoyt wrote:
>Users in a child domain get access denied when they try and change the membership of distribution lists (through Outlook). They have been granted write access to 'members' property.These users can modify the membership if they use Active Directory Users and Computers, but not if they use Outlook.
Whether they can modify the contents of a DL from Outlook depends on
which Global Catalog server Outlook is using. If it's using a GC on a
DC in the same AD domain it shold work. If Outlook is using a GC on a
in then it won't work.
The mailbox and DL need to be in the same AD domain, and the GC used
by Outlook needs to be in that same AD domain. If this isn't the case
then Outlook is using a GC that has a read-only copy of the directory
data.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
