Granting permissions to modify members on multiple DL's

[Bill]

I want to grant a group (let's call it HR) the ability
to modify members on multiple distribution lists (we're
an Exchange 2000 shop). I know how to do this on a single
group object:

*Go to the security tab
*Advanced
*Add
*Properties Tab
*Allow Read Members and Write Members (this object only)

That works swimmingly; but what if I want to grant HR
the same permission to a couple of dozen groups? I've
looked at dsacl from the support tools but I can't find
the correct syntax to get the job done. Is there a
better way? I'd love to be able to just highlight
multiple objects in ADUC, but of course you get no
security tab that way. Delegation wouldn't cut it
because I don't want to move these DL's into a separate
OU just for this purpose.


Thanks in advance for your help...

 

[Joe Richards [MVP]]

Well you could put them all in one OU and then delegate the permission on the OU so that it was inherited to all of the
groups.

Other than that

dsacls CN=testgroup,DC=domain,DC=com /I:S /G domain\admingroup:WP;member;group