none
2010 Distribution Group Mgmt in ECP RRS feed

  • Question

  • I'm still struggling with permissions of the default settings in regards to enabling distribution group management in 2010. this. If I add (using ECP) the MyDistributionGroups role in User Roles for the Default Role Assignment Policy, it works. Users can use OWA to manage groups they own. And they can create and delete groups. I then unchecked this role since it provided too many permissions.

    I've run the Manage-GroupManagementRoles.ps1 script (http://gallery.technet.microsoft.com/scriptcenter/8c22734a-b237-4bba-ada5-74a49321f159). I've read the blog, http://blogs.technet.com/b/exchange/archive/2009/11/18/3408844.aspx. After running the script I realized that I can't simply go into the ECP and check the MyDistributionGroups role again. Instead I had to add this role to the default policy, like so.
    New-ManagementRoleAssignment -Name "MyDistributionGroupsManagement-Default Role Assignment Policy" -Role MyDistributionGroupsManagement -Policy "Default Role Assignment Policy"

    After runnning this, I can manage groups from Outlook but not OWA. Which is a little funny, because if users only use Outlook for group management, they'll never realize they can create groups anyway.
    I would like to enable group management in OWA. How do I do this, without turning on the precanned role which gives too many permissions?
    Thanks,
    Paul

    Friday, June 21, 2013 9:05 PM

Answers

All replies

  • Hi

    Is the user you login the owner of distribution list?

    Also will this article help ?

    “Allowing End-Users to Manage Distribution Group Membership in Exchange 2010”

    http://sysadmin-talk.org/2010/06/omg-allowing-end-users-to-manage-distribution-group-membership-in-exchange-2010-2/

    Cheers


    Zi Feng
    TechNet Community Support

    • Marked as answer by Zi Feng Friday, June 28, 2013 1:43 AM
    Monday, June 24, 2013 8:18 AM
  • Zi,

    Thank you for the reply. That is a good blog link, unfortunately it is similar to the link I posted. Yes, I created a custom role and applied it. The catch is, when you uncheck the MyDistributionGroups role in ECP it is no longer available in OWA.

    That is, when using a custom role, one turns off the built-in role first. Turning off the built-in role removes the ability to perform group management within ECP. Creating and applying a custom role does not turn on this feature in ECP.

    I would like to use my custom role in ECP. Is this possible?

    Thanks,

    Paul

    Monday, July 1, 2013 1:40 PM