Re: Distribution Groups changing to Security Groups

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 01/13/05


Date: Wed, 12 Jan 2005 19:47:39 -0500

Try to reapply the permission now that you have changed your domain mode.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Stephane Gagne wrote:
> I have assign permisions to a security group that was previously a 
> distribution group but permissions are not effectives, if I create a new 
> security group with the same members, the last group will have the given 
> permission ...
> 
> 
> any idea ?
> 
> "Joe Richards [MVP]" wrote:
> 
> 
>>Ah, you were trying to switch a universal group to a security group. Yes. This 
>>is known, universal DLs can exist in mixed mode but universal security groups 
>>can't. Native mode is required for universal security groups.
>>
>>   joe
>>
>>--
>>Joe Richards Microsoft MVP Windows Server Directory Services
>>www.joeware.net
>>
>>
>>Stephane Gagne wrote:
>>
>>>Hi Joe,
>>>
>>>I have found that you cannot change the group type/scope when the domain is 
>>>not in native mode. So I have switched my domain from mixed to native and 
>>>changed the group type.
>>>
>>>Thanks.
>>>
>>>"Joe Richards [MVP]" wrote:
>>>
>>>
>>>
>>>>That means you don't have permission. The GUI should be able to do it if you 
>>>>have permissions.
>>>>
>>>>If you have Windows 2003 you can use dsmod. However, if you don't have 
>>>>permissions, it won't do it either.
>>>>
>>>>  joe
>>>>
>>>>--
>>>>Joe Richards Microsoft MVP Windows Server Directory Services
>>>>www.joeware.net
>>>>
>>>>
>>>>Stephane Gagne wrote:
>>>>
>>>>
>>>>>Sorry ..
>>>>>
>>>>>
>>>>>I can't change this option in Active Directory Users and Computers, the 
>>>>>security type is shaded.  I know that tehre is some command line to manage 
>>>>>AD, do you know by which one I can change this parameter ?
>>>>>
>>>>>"Joe Richards [MVP]" wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Sure, just change the grouptype attribute of the group. That can be done through 
>>>>>>the aduc or via scripts.
>>>>>>
>>>>>>
>>>>>>--
>>>>>>Joe Richards Microsoft MVP Windows Server Directory Services
>>>>>>www.joeware.net
>>>>>>
>>>>>>
>>>>>>Stephane Gagne wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>>Hi,
>>>>>>>
>>>>>>>Is there a way to change all distribution groups to security groups whiout 
>>>>>>>deleting the distribution group and create a new security group ?
>>>>>>>
>>>>>>>I've tried to assign permisions on a public folder for a distribution group 
>>>>>>>but I have an error: The modified permissions could not be saved.  The client 
>>>>>>>operation failed...
>>>>>>>
>>>>>>>Thanks
>>>>>>>
>>>>>>>"Joe Richards [MVP]" wrote:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>Anytime *ANYONE* uses a DL to assign permissions to anything in Exchange 
>>>>>>>>(including say a user giving a DL permissions on a calendar or something), 
>>>>>>>>Exchange converts the DL to a Security enabled DL.
>>>>>>>>
>>>>>>>>joe
>>>>>>>>
>>>>>>>>--
>>>>>>>>Joe Richards Microsoft MVP Windows Server Directory Services
>>>>>>>>www.joeware.net
>>>>>>>>
>>>>>>>>
>>>>>>>>John Marszalek wrote:
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>>I have a question:
>>>>>>>>>
>>>>>>>>>We have a couple of Distribution groups in our W2K3 AD that are set up so a 
>>>>>>>>>user can e-mail a group of people, and every now and then, when we go back 
>>>>>>>>>into AD, they are changed to security groups.  Why is it changing them?  
>>>>>>>>>There are only 3 people who have access to our AD, and no one is changing 
>>>>>>>>>them.  This has happened a few times.  Any ideas?  I can be e-mailed at 
>>>>>>>>>jmarsz@educ.state.wy.us.  Thanks!
>>>>>>>>


Relevant Pages

  • Re: Distribution Groups changing to Security Groups
    ... have permission, there are ways to grant yourself those permissions to do so. ... >>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: read and write permission does not delete word ~ files
    ... Isn't the only differnece between Read&Execute with Write and the Modify the ... > In the advanced tab you can specify delete permission instead of giving ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.security)
  • Re: Audit exchange permission
    ... What I want is to check which group or users have permission to all the ... exchange objects. ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.advanced_server)
  • Re: Fax printer inaccessible
    ... Give "Print" permission to the security group on the shared fax printer. ... If it is a local user, it goes as anonymous to the server. ... >> with the default security settings, even if you have faxing permissions ...
    (microsoft.public.win2000.fax)
  • RE: Home Folder - Users Shared Folders Issues
    ... even using security group. ... folder is combined with security permission and sharing permission. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)