Re: Distribution Groups changing to Security Groups

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 01/12/05 

Date: Wed, 12 Jan 2005 12:56:32 -0500

Ah, you were trying to switch a universal group to a security group. Yes. This
is known, universal DLs can exist in mixed mode but universal security groups
can't. Native mode is required for universal security groups.

   joe 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Stephane Gagne wrote:
> Hi Joe,
> 
> I have found that you cannot change the group type/scope when the domain is 
> not in native mode. So I have switched my domain from mixed to native and 
> changed the group type.
> 
> Thanks.
> 
> "Joe Richards [MVP]" wrote:
> 
> 
>>That means you don't have permission. The GUI should be able to do it if you 
>>have permissions.
>>
>>If you have Windows 2003 you can use dsmod. However, if you don't have 
>>permissions, it won't do it either.
>>
>>   joe
>>
>>--
>>Joe Richards Microsoft MVP Windows Server Directory Services
>>www.joeware.net
>>
>>
>>Stephane Gagne wrote:
>>
>>>Sorry ..
>>>
>>>
>>>I can't change this option in Active Directory Users and Computers, the 
>>>security type is shaded.  I know that tehre is some command line to manage 
>>>AD, do you know by which one I can change this parameter ?
>>>
>>>"Joe Richards [MVP]" wrote:
>>>
>>>
>>>
>>>>Sure, just change the grouptype attribute of the group. That can be done through 
>>>>the aduc or via scripts.
>>>>
>>>>
>>>>--
>>>>Joe Richards Microsoft MVP Windows Server Directory Services
>>>>www.joeware.net
>>>>
>>>>
>>>>Stephane Gagne wrote:
>>>>
>>>>
>>>>>Hi,
>>>>>
>>>>>Is there a way to change all distribution groups to security groups whiout 
>>>>>deleting the distribution group and create a new security group ?
>>>>>
>>>>>I've tried to assign permisions on a public folder for a distribution group 
>>>>>but I have an error: The modified permissions could not be saved.  The client 
>>>>>operation failed...
>>>>>
>>>>>Thanks
>>>>>
>>>>>"Joe Richards [MVP]" wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Anytime *ANYONE* uses a DL to assign permissions to anything in Exchange 
>>>>>>(including say a user giving a DL permissions on a calendar or something), 
>>>>>>Exchange converts the DL to a Security enabled DL.
>>>>>>
>>>>>> joe
>>>>>>
>>>>>>--
>>>>>>Joe Richards Microsoft MVP Windows Server Directory Services
>>>>>>www.joeware.net
>>>>>>
>>>>>>
>>>>>>John Marszalek wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>>I have a question:
>>>>>>>
>>>>>>>We have a couple of Distribution groups in our W2K3 AD that are set up so a 
>>>>>>>user can e-mail a group of people, and every now and then, when we go back 
>>>>>>>into AD, they are changed to security groups.  Why is it changing them?  
>>>>>>>There are only 3 people who have access to our AD, and no one is changing 
>>>>>>>them.  This has happened a few times.  Any ideas?  I can be e-mailed at 
>>>>>>>jmarsz@educ.state.wy.us.  Thanks!
>>>>>>

Relevant Pages

  • Re: Distribution Groups changing to Security Groups
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... > Is there a way to change all distribution groups to security groups whiout> deleting the distribution group and create a new security group? ... > I've tried to assign permisions on a public folder for a distribution group> but I have an error: The modified permissions could not be saved. ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Groups changing
    ... If you use them to assign permissions in Exchange, ... Joe Richards Microsoft MVP Windows Server Directory Services ... > Security groups and not sure why. ...
    (microsoft.public.win2000.active_directory)
  • Re: Distribution Groups changing to Security Groups
    ... Is there a way to change all distribution groups to security groups whiout ... I've tried to assign permisions on a public folder for a distribution group ... The modified permissions could not be saved. ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Folder Permissions.
    ... With this createed security groups you set NTFS/share permissions on the folders where your files are located, ... Security groups can create 'conflicts' if some user accunts are members of multiple security groups that are used with concurrent permissions on your data folders/shares. ... If this is clear and your folder permission are not really to understand for you, i would create a new folder structure on a new shared fodler and copy data to the new structure where the permissions set as needed in the company, which is now done with your own created new security groups. ... More or less the same way you can use to built a new OU structure with new GPOs and move the users/computers to them, of course you have to test all new structures before with test accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: public folder permissions: 5.5 vs. 2003
    ... have 8 other sites to migrate before we can complete and go to native mode. ... "secretaries" we do have both the DL list and the security group. ... you cannot go back to the normal MAPI permissions. ... How do you apply the client access to security groups and still utilize the ...
    (microsoft.public.exchange.admin)