删除默认的exchange 2010中普通用户创建删除通讯组的权限

New-RoleAssignmentPolicy "No Distribution Group Management"

$Roles = Get-ManagementRoleAssignment -RoleAssignee "Default Role Assignment Policy"

$Roles | Where {$_.Role -NotLike "*Distribution*" } | New-ManagementRoleAssignment -Policy "No Distribution Group Management"

 

Set-RoleAssignmentPolicy "No Distribution Group Management" -IsDefault

 

Set-RoleAssignmentPolicy "Default Role Assignment Policy" -Name "Old_Default Role Assignment Policy"