Re: Distribution Groups changing to Security Groups

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Stephane Gagne (StephaneGagne_at_discussions.microsoft.com)
Date: 01/13/05 

Date: Thu, 13 Jan 2005 08:35:04 -0800

I've waited 1 day just to be sure for the replication between DC and test it
this morning with the same security group and I still don't have access ...

"Joe Richards [MVP]" wrote:

> Try to reapply the permission now that you have changed your domain mode.
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> Stephane Gagne wrote:
> > I have assign permisions to a security group that was previously a
> > distribution group but permissions are not effectives, if I create a new
> > security group with the same members, the last group will have the given
> > permission ...
> >
> >
> > any idea ?
> >
> > "Joe Richards [MVP]" wrote:
> >
> >
> >>Ah, you were trying to switch a universal group to a security group. Yes. This
> >>is known, universal DLs can exist in mixed mode but universal security groups
> >>can't. Native mode is required for universal security groups.
> >>
> >> joe
> >>
> >>--
> >>Joe Richards Microsoft MVP Windows Server Directory Services
> >>www.joeware.net
> >>
> >>
> >>Stephane Gagne wrote:
> >>
> >>>Hi Joe,
> >>>
> >>>I have found that you cannot change the group type/scope when the domain is
> >>>not in native mode. So I have switched my domain from mixed to native and
> >>>changed the group type.
> >>>
> >>>Thanks.
> >>>
> >>>"Joe Richards [MVP]" wrote:
> >>>
> >>>
> >>>
> >>>>That means you don't have permission. The GUI should be able to do it if you
> >>>>have permissions.
> >>>>
> >>>>If you have Windows 2003 you can use dsmod. However, if you don't have
> >>>>permissions, it won't do it either.
> >>>>
> >>>> joe
> >>>>
> >>>>--
> >>>>Joe Richards Microsoft MVP Windows Server Directory Services
> >>>>www.joeware.net
> >>>>
> >>>>
> >>>>Stephane Gagne wrote:
> >>>>
> >>>>
> >>>>>Sorry ..
> >>>>>
> >>>>>
> >>>>>I can't change this option in Active Directory Users and Computers, the
> >>>>>security type is shaded. I know that tehre is some command line to manage
> >>>>>AD, do you know by which one I can change this parameter ?
> >>>>>
> >>>>>"Joe Richards [MVP]" wrote:
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>>Sure, just change the grouptype attribute of the group. That can be done through
> >>>>>>the aduc or via scripts.
> >>>>>>
> >>>>>>
> >>>>>>--
> >>>>>>Joe Richards Microsoft MVP Windows Server Directory Services
> >>>>>>www.joeware.net
> >>>>>>
> >>>>>>
> >>>>>>Stephane Gagne wrote:
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>Hi,
> >>>>>>>
> >>>>>>>Is there a way to change all distribution groups to security groups whiout
> >>>>>>>deleting the distribution group and create a new security group ?
> >>>>>>>
> >>>>>>>I've tried to assign permisions on a public folder for a distribution group
> >>>>>>>but I have an error: The modified permissions could not be saved. The client
> >>>>>>>operation failed...
> >>>>>>>
> >>>>>>>Thanks
> >>>>>>>
> >>>>>>>"Joe Richards [MVP]" wrote:
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>>Anytime *ANYONE* uses a DL to assign permissions to anything in Exchange
> >>>>>>>>(including say a user giving a DL permissions on a calendar or something),
> >>>>>>>>Exchange converts the DL to a Security enabled DL.
> >>>>>>>>
> >>>>>>>>joe
> >>>>>>>>
> >>>>>>>>--
> >>>>>>>>Joe Richards Microsoft MVP Windows Server Directory Services
> >>>>>>>>www.joeware.net
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>John Marszalek wrote:
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>>I have a question:
> >>>>>>>>>
> >>>>>>>>>We have a couple of Distribution groups in our W2K3 AD that are set up so a
> >>>>>>>>>user can e-mail a group of people, and every now and then, when we go back
> >>>>>>>>>into AD, they are changed to security groups. Why is it changing them?
> >>>>>>>>>There are only 3 people who have access to our AD, and no one is changing
> >>>>>>>>>them. This has happened a few times. Any ideas? I can be e-mailed at
> >>>>>>>>>jmarsz@educ.state.wy.us. Thanks!
> >>>>>>>>
>