OK - many thanks. Our GRE GUI users are already DP Admins, so that's covered, no need to add them to GRE Exchange group.
Tests have shown that GRE GUI users do also need to be given Full Control permissions to the exchgre registry key, even if they are already domain admins.
So hopefully that's about it.