To keep my question as simple as possible, this is what I would like to address
Environment Exchange 2010Sp2
Give users the ability to manage distribution groups that they own through Outlook and OWA but restrict what they can actually see if they wish to add or remove users.
The issue that I have ran into right now is that if I allow a user to manage distribution groups, they are locked down by the GALs in Outlook and can not see other members from other domains. They can only see their domain's organization address books/members.
The issue is that if they were to login to OWA and then the Exchange control console and then try to manage groups there, they can then see all users from all domains. I would like them to only be able to see items only from their particular OU.
I can clarify more if needed but this is the basics.