Re: Managed by parameter not working on a Universal Group between 2 do
- From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
- Date: Thu, 08 Sep 2005 18:02:27 -0400
The outlook client is talking to a GC that is a DC for domain B. The group membership can be retrieved from that GC since uni groups publish membership to the global catalogs but can't be updated there. The protocol being used is NSPI and it doesn't support referrals so you get the error that you don't have permissions to modify the membership which is correct, no one has permissions to modify a Domain A group on a Domain B Domain Controller.
If the user and the DL were in the same domain it could still happen as long as a GC was used that wasn't from the same domain as the DL. There is a fix for this in Exchange 2003 SP1 but it forces DSPROXY to try and always give a client in Domain B a Domain B GC, this won't help your case of course.
This is why MS themselves do not use Outlook to manage DLs, they use web based DL management software. Previously it was AutoDL, now it is AutoGroups which is (or soon will be) a function of MIIS.
joe
-- Joe Richards Microsoft MVP Windows Server Directory Services www.joeware.net
John wrote:
We are running W2k3 AD and Exchange 2003 SP1 in a multiple child domain environment. When we create a Universal Distribution Group in say domain A and add a user in domain B to the Manager tab (we also check 'Manager can update membership list'), that user is unable to modify the membership via Outlook 2003. The user receives a message that she does not have permissions to modify the members. Replication is working fine and the we dont' receive any errors when we set the UDG up.
What am I missing?
Any help is greatly appreciated.
.
- Follow-Ups:
- Re: Managed by parameter not working on a Universal Group between 2 do
- From: Joe Richards [MVP]
- Re: Managed by parameter not working on a Universal Group between 2 do
- References:
- Prev by Date: Re: Calendar Permissions
- Next by Date: Re: Managed by parameter not working on a Universal Group between 2 do
- Previous by thread: Managed by parameter not working on a Universal Group between 2 do
- Next by thread: Re: Managed by parameter not working on a Universal Group between 2 do
- Index(es):
Relevant Pages
|
