Re: Distribution group kept changing

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks again for your help.

"Joe Richards [MVP]" wrote:

Could be anything, public folders, calendars, folders in a mailbox.
Trying to locate the resources the group is being applied to could be
extremely difficult unless you have a very small deployment or you have
scripts that can enumerate through all permissions.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Sally wrote:
Thank you for your explanations again. So, I have to find which exchange
resources these group are applied security on? Most likely, which exchange
resources could they be assigned to?

Thank you again.

"Jorge de Almeida Pinto [MVP - DS]" wrote:

joe is saying the same as I am, however in another way

let me try to rephrase...

if a distribution group is being used to secure ANY exchange resource,
exchange will security enable the group....with "security enable the group"
is what is meant by converting a distribution group to a security group


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Sally" <Sally@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FB034062-3357-4146-B43D-88B0E5D9294E@xxxxxxxxxxxxxxxx
Thanks for your reply. I do not understand what you mean and sorry.

These groups we created are distribution groups and for email purposes.
Why
do they change to security group?

"Joe Richards [MVP]" wrote:

You can fix it by uninstalling Exchange.

Exchange will automatically switch the group type for any group anyone,
and I mean anyone, even your most untrusted lowly user, that has a
mailbox and chooses to use the group to secure something in Exchange.
Either a calendar or a mailbox folder or a public folder.

You cannot disable this.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Sally wrote:
Hi all,

I do not know why many distribution groups switched back to the
security
group. then I manually changed them back to distribution groups and
switched
back to the security group again after two or several days.

Do you know how to fix this? We are win2K3 R2 envir.

Thank you.



.

Relevant Pages

  • Re: Distribution group kept changing
    ... Could be anything, public folders, calendars, folders in a mailbox. ... Trying to locate the resources the group is being applied to could be extremely difficult unless you have a very small deployment or you have scripts that can enumerate through all permissions. ... if a distribution group is being used to secure ANY exchange resource, exchange will security enable the group....with "security enable the group" is what is meant by converting a distribution group to a security group ... These groups we created are distribution groups and for email purposes. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Best practices for groups?!
    ... Some distribution groups have been turned into security groups by using ... We have used the DL for file permissions, with GG as member, and then ... such as if you are an Exchange admin without AD ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD distribution and security group usage
    ... I have created a test DL and given it permission to review my calendar. ... The issue is that Exchange now uses SIDs instead of DNs for security on Exchange ... Know the last time that distribution groups were being used/are being ...
    (microsoft.public.win2000.active_directory)
  • Re: Distribution group kept changing
    ... I have to find which exchange ... resources these group are applied security on? ... exchange will security enable the group....with "security enable the group" ... These groups we created are distribution groups and for email purposes. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Show permissions on DLs in 2003
    ... you can use Distribution groups as security principals. ... 274046 You Cannot Add a Distribution Group to Permissions of a Public Folder ... Migrated Exchange Server 5.5 Mailboxes Generate ...
    (microsoft.public.exchange.admin)