How to restrict modifications to group members?
Distribution groups contain members with common purposes, same department, same functionality.
If security setting is not configured properly, users within the domain can modify the members by add/delete members and changes will be reflected in the Global Address List (GAL), that will be propagated to all users.
The user doesn’t do that necessarily on purpose, they might edit a distribution group thinking it’s only on their outlook address book.
To limit permissions:
- Open Active Directory Users and Computers console
- Go to View -> Advanced features
- Double click the group you want to configure
- Click on security tab
- Locate and select the user/group and check permission in the second window below. Authenticated Users group, are all the domain users, make sure of its permissions
- Remove write permission from the specific user/group to prevent them from modifying group members
#1 by Marzouq on March 2, 2009 - 9:35 AM
Very nice info.. have you guys upgraded to Exchange 2008?
#2 by Mahbob on March 2, 2009 - 4:29 PM
Marzouk you mean Exchange 2007
#3 by Mahbob on March 2, 2009 - 4:31 PM
I did the migration it is very easy if you need help just tell me
#4 by Bloggylife on March 3, 2009 - 6:10 AM
Marzouq, there’s a plan but just waiting for the hardware!
Mahbob, thanks man, all the plans are still all on paper