I may already know the answer to this but was hoping someone could provide a article as I cannot find anything.
After migrating to exchange 2013 we cannot change membership or ownership for security enabled distribution groups using the EAC unless we are already in the ownership list.
"You don't have sufficient permissions. This operation can only be performed by a manager of the group."
We can use the shell (this is what I have been doing since we migrated) with the -bypasssecuritygroupmanagercheck switch. Is this by design? I would think being a member of Distribution Groups role would allow this.
I have created a quick script to add multiple owners to a group if anyone is interested.
#Connect to Exchange $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://server-name/PowerShell/ -Authentication Kerberos -Credential (Get-Credential) Import-PSSession $Session -AllowClobber Write-Host 'What is the name of the group you would like to add to? e.g. ACL-CHQ-script-test' -ForegroundColor Green $Group = Read-Host #Get new user list Write-Host "Please specify the users you would like to add as managers of the group. Example: first.last@domain.com,chq-firstl,First Last" -ForegroundColor Green $Users = (Read-Host).split(',').trim() $managers = Get-DistributionGroup $group | select -ExpandProperty managedby | Get-Mailbox #Add to existing list of managers $ArraylistM = {$managers.alias}.invoke() $ArraylistM.add($users) $ManagerString = [system.String]::Join(",", $ArraylistM) $AllManagers = $ManagerString -replace " ","," Set-DistributionGroup $Group -ManagedBy $AllManagers.split(',') -BypassSecurityGroupManagerCheck Write-Host 'Current list of managers for '$Group Get-DistributionGroup $Group | select -ExpandProperty managedby