Author: Steve Man

Create and edit a distribution list

Creating Distribution list in Outlook:
 
 
 
 
You may also watch a video on how to create a distribution list in Outlook. Click on the link below:
 

configure RBAC for restoring mailboxes to recovery database

request/issue: customer wants to be able to restore mailboxes to recovery database
recommended solution:
step 1: Find which role has the role entry
use this cmdlet to find out:
Get-ManagementRoleEntry “*Restore-Mailbox” | fl Name,Role
result:
Name : Restore-Mailbox
Role : Disaster recovery
step 2: Create a new role for eg ServerAdmins-Restore-Mailbox that inherits all the permissions of ‘disaster recover’ built in role
for eg New-ManagementRole -Name ‘ServerAdmins-Restore-Mailbox’ -Parent ‘Disaster recovery’
 Step 3: Add the newly created role to the role group using shell or ECP
Note: You can choose to ONLY allow restore-mailbox cmdlet to the “serveradmins-restore-mailbox” role
by using this command:

Add-ManagementRoleEntry “ServerAdmins-Restore-Mailboxrestore-mailbox”
use this command to view the mgmt role entries for the newly created role “serveradmins-restore-mailbox”
Get-ManagementRoleEnty “serveradmins-restore-mailbox*”

you do not have sufficient permission to perform this operation on the object

Issue: Customer was getting this error message ” Changes to the public group membership cannot be saved. you do not have sufficient permission to perform this operation on the object
Finding: Users(owners) who managed groups were put in a universal distribution/security group called grp-groupname. In AD console, the groups were added as managers under the managed by tab. This worked ok in Exchange 2007. However, group owners that are migrated to Exchange 2010 get permission errors trying to add a member to the group via Outlook 2007/2010. Exchange 2010 console now has managed by property beneath newly added group information tab. By so doing, one can’t use groups to manage security/distribution group, mail enabled or not. Exchange 2010 console shows the grp-groupname as object not found.
This problem doesn’t apply to groups that only 1 owner assigned.
Resolution: While in exchange mgmt console, Add the owners of the group under managed by property of Group information tab. Note that this will upgrade the group to exchange 2010 group. Only Exchange 2010 groups can allow multiple owners of the mailbox. Customers that want multiple owners for a group will need that group upgraded. Another way to upgrade a group is by using this powershell cmdlet. You must do this in exchange 2010 shell
set-distributiongroup -Name -forceupgrade