Re: Delegating mailbox rights

It's because your group membership gets enumerated at login. If you login,
and later get added to a security group, your session token doesn't update
with that new security group. Logout/login forces a re-evaluation of group
membership and so at that point you can get access to the target mailbox.

--
Hunter

"JimmyM" <JimmyM@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:096B85C1-5133-4F7C-8E4D-99EE4977991B@xxxxxxxxxxxxxxxx
Hi IT-Pros,

I have a question that is not a big problem but more of a puzzle.

When I delegate mailboxrights from ADUC to a Global Security Group and add
users to this group the users who want to access the mailbox have to wait
until the next day if they do not want the error message "Unable to
display
the folder. Microsoft Office Outlook could not access the specified folder
location." when they click the added mailbox in Outlook. They also get the
"Unable to expand folder" if they click the plus sign.

But if I delegate the rights directly to a user (not group) everything
works
fine right away. Why is that?

Anyone?

Regards,
Jimmy




.

Relevant Pages

  • Re: Determine AD group membership
    ... Note that this will only give you security group info. ... As more and more LDAP based applications start using distribution lists for their internal security instead of Windows security groups this will play more and more into apps that need to monitor group membership. ... Kerberos tickets PAC data to get this info? ...
    (microsoft.public.platformsdk.security)
  • Re: Mailbox permissions using security groups
    ... Exact licensing restrictions are vendor specific but generally if a mailbox ... Permissions must be applied to security groups. ... I just want to buy licenses to cover mailboxes that actually receive ... In order for a security group to appear in the GAL and consequently ...
    (microsoft.public.exchange.admin)
  • Slow login due to group participation
    ... the logon takes about 3 minutes. ... aren't added to this single security group, ... Is there some way to determine where exactly the problem lies short of ... the group membership? ...
    (microsoft.public.windows.server.general)
  • Re: how to restrict users to search in their own Organizational Unit
    ... 1- Create a Security Group and deny the read permission to certain OUs then Place the MOSS administrators that Security group so they can't have read access to that OUS. ... Now, as Herb stated in last post, you can have problems related to the maintenance of the group membership, because you're dealling with many OUs and Users, so you should write a script to automate the process of mantaining the group membership, and you can also use another script to define the new permissions, add users etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: SQL Access Help!!!
    ... I created new login and chose the security group ... > user belongs to, ... >> This is my first SQL Server setup and I am having some problem. ...
    (microsoft.public.sqlserver.setup)