Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

To keep my question as simple as possible, this is what I would like to address

Environment Exchange 2010Sp2

Give users the ability to manage distribution groups that they own through Outlook and OWA but restrict what they can actually see if they wish to add or remove users.

The issue that I have ran into right now is that if I allow a user to manage distribution groups, they are locked down by the GALs in Outlook and can not see other members from other domains. They can only see their domain's organization address books/members.

The issue is that if they were to login to OWA and then the Exchange control console and then try to manage groups there, they can then see all users from all domains. I would like them to only be able to see items only from their particular OU.

I can clarify more if needed but this is the basics.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.