Re: Moving Distibution Lists to Child Domains
From: Steven Halsey [MSFT] (Stevhal_at_Online.Microsoft.com)
Date: 08/23/04
- Next message: scurra: "Using OWA 2003 with Exchange 5.5 backends"
- Previous message: DVT: "Re: Can front-end server also be SMTP connector"
- In reply to: Joey Hornick: "Re: Moving Distibution Lists to Child Domains"
- Next in thread: Al Mulnick: "Re: Moving Distibution Lists to Child Domains"
- Reply: Al Mulnick: "Re: Moving Distibution Lists to Child Domains"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 23 Aug 2004 13:55:44 -0700
The domain is a tricky issue. As I understand it works like this: When
Outlook starts up it either selects a Windows Global Catalog Domain
Controller, or gets referred to a GC from the Exchange server. When you
attempt to manage a Group through Outlook it will make all the changes
against this Global catalog. But if the GC is not from the same domain as
the object you are trying to change then you will be unable to make changes
to the group. So if your Outlook client is binding to a GC that is not in
the domain of the Group you are trying to manage then you will be unable to
make changes.
There are a couple of solutions to this issue:
1) Put all the Groups in One domain, and make all the Global Catalogs exist
in the one domain. This really isn't advisable as Windows works best when
there is a Global Catalog per domain.
2) On the client there are registry keys that you can set to force the
client to bind to a certian Global Catalog. While this solves the group
problem it forces the client to talk to a single GC and when the GC is down
the Client becomes unable to access the Global Address List.
Registry\Current User\Software\Microsoft\Exchange\Exchange Provider
and add the following string:
String Value: DS Server
Value Data: <FQDN of the DC in the child domain> ie:
interop202.flare.solar.com
3) Windows is made in such a way that when the Outlook client requests a GC
it is most likely to get a GC from the local Windows Domain and Windows
site. So if you were to move the group to the same domain as the Outlook
client chances are the client would be able to administrate the group
successfully most of the time.
In order to see the security tab, you will need to open an Active Directory
Users and Computers MMC. From the menu select View and make sure the
"Advanced Features" is checked. Then when you browse to an object you
should see the security tab.
-- Steven Halsey Stevhal@online.microsoft.com Microsoft Exchange Please do not send email directly to this alias. This alias is for newsgroup purposes only. This posting is provided "AS IS" with no warranties, and confers no rights. "Joey Hornick" <hornickj@msn.com> wrote in message news:9viii0hkf2iblm2peb43jdgp06da2ue62l@4ax.com... >A couple of things, if these users that will be updating these groups > are in a different child domain will they be able to accomplish this > since the groups on part of the partent domain? Do these groups need > to be in a certain place in the AD structure? > > I also don't see the security tab that you are speaking of?? > > Thanks, > Joey > > On Thu, 12 Aug 2004 16:41:13 -0700, "Steven Halsey [MSFT]" > <Stevhal@Online.Microsoft.com> wrote: > >>I believe by default Windows Does not allow the client permissions to do >>this. You can add the permission as follows: >> >>Open Active Directory Users and Computers >>>From the View Menu, select advanced Features >>Browse to one of the groups, right click and select properties >>On Managed By Tab change click the check box "Manager can update >>Membership >>list". This should apply the ability for the client to update membership. >>You can check it by going to the security tab, and checking that the added >>account has the "special Permissions" for this object >
- Next message: scurra: "Using OWA 2003 with Exchange 5.5 backends"
- Previous message: DVT: "Re: Can front-end server also be SMTP connector"
- In reply to: Joey Hornick: "Re: Moving Distibution Lists to Child Domains"
- Next in thread: Al Mulnick: "Re: Moving Distibution Lists to Child Domains"
- Reply: Al Mulnick: "Re: Moving Distibution Lists to Child Domains"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
