RE: Creating Contacts

From: Caren Mallue [MSFT] (a-carenm_at_online.microsoft.com)
Date: 02/14/04 

Date: Sat, 14 Feb 2004 00:14:24 GMT

Hello Kev,

Here is a possible workaround to allow users to create contact without
granting them Administrator permissions.

1. Create Organizational Unit
=======================
Create an OU for the Contacts to be located in

2. Create / identify User account Responsible for managing the Contacts
==================================================
Rather than creating a group, let one normal user manage the task to
minimize risk

3. Delegate Control to the OU
========================
Right click on container
Choose "Delegate Control"
Click Next at the intro screen
On the Users and Groups screen, click the Add button
Add the appropriate group(s) and click OK
Click Next
Select "Create a custom tack to delegate" and click Next.
Leave the radio button on "This folder, existing objects in this folder,
and creation of new objects in this folder" and click Next
Check the box marked "Creation/deletion of specific child objects"
In the Permission window, check the two boxes labeled
"Create Contact objects" and "Delete contact objects"
"Read All Properties" and "Write All Properties".
"Create and Delete Exchange Organizational Objects
"Create Group objects" and "Delete Group objects" and click Next and Finish

4. Delegate Control on the Exchange Site
====================================
Right click on the site container in ESM
Choose "Delegate Control"
Click Next at the intro screen
On the Users and Groups screen, click the Add button
Add the appropriate group(s) and specify the Role "Exchange Administrator"
click OK and Next
Add the user to the Local Administrator Group per the warning message

5. Prepare the client for the tasks
==========================
Add the DSA.MMC to the client's workstation in order to access the Active
Directory Users and Computers
After completing these steps, the user will be able to;
- Add a Contact
- Add a Distribution Group [DL]
- Modify Membership to the DL

6. Test Configuration
==================
After configurations are completed test these configurations while logged
on as the contacts management account created previously.

Thanks,

Caren Mallue
Microsoft Exchange Support

Please do not send email directly to this alias. This alias is for
newsgroup purposes only.

This posting is provided "AS IS" with no warranties, and confers no rights.