I'm migration from Exchange 2007 to Exchange 2010. One of the obstacles I've encountered recently is after upgrading Distribution Groups from 2007 to 2010, users who are assigned managers to these DGs don't have the ability to add/remove members. After some research, I found a script from Microsoft that takes care of the issue with a blanket resolution in that it creates a new role assignment policy with the MyDistributionGroups permission enabled and further, it remove the ability for users to remove and/or add existing and new DGs. This is what I need to do, but I don't want to use the script.
So I created a new Role Assignment Policy and have added only myself to this policy as a test - I have confirmed that I now have ability to edit members of DG in which I'm the DG manager, but also have the ability to create and/or remove DGs. How can I further edit this policy to remove the ability to create new DGs and remove existing DGs? Please help as I'd prefer not to use the script provided by Microsoft. I'd prefer a method in which EMS can be used.
Thanks all!