Exchange 2010 SP1 mail universal security group changes?

Status
Not open for further replies.
T

tyler gohl

Were there any changes to default permissions / security in regards to Mail enabled Universal Security Groups in 2010 SP1? I can't say for certain, but I'm fairly confident that prior to SP1 I our helpdesk was able to add users to Security DLs directly through Exchange Management Console. Now, however, we get the:

" You don't have sufficient permissions. This operation can only be performed by a manager of the group." error.

Via the EMS, I can just add in the -BypassSecurityGroupManagerCheck switch, and the changes will go through. Is there a way to make the Console behave similarly? The admins in question all are members of " Exchange Organization Administrators" role.
 
M

Mike Crowley

I"m also experiencing this issue at a customer site. We"ve installed SP1 and now even with membership in the organizational management group, I cannot add members to security-enabled distribution groups; though I"m not sure if SP1 caused this or the upgrade to 2010 as a whole. We just recently upgraded to 2010 so I"m not sure if we"ve tried modifying group memberships post RTM pre SP1.

Reading: Add-DistributionGroupMember help, it states:


The BypassSecurityGroupManagerCheck parameter specifies whether to bypass security checks and moderation for the member being added, if the specified distribution group is a moderated distribution group.


Which to me suggests this should not be necessary when the group is not a moderated distribution group (which this isn"t).

Making the change in ADUC by the way is permitted. Also this doesn"t seem to apply to non-security groups.

I"ll do some research and post back any findings.

Mike Crowley
Check out My Blog!
 
M

Mike Crowley

In another forest: I just tried this on a 2010 RTM build which also was upgrade from 2003 and am able to make the changes to group membership as expected.

Since it's another Exchange organization, it"s not a fair comparison, but its definitely looking like this is a SP1 split-permission introduction/issue.

Mike Crowley
Check out My Blog!
 
T

TrentWeiler

Did you ever find a resolution to this issue? I am encountering the exact same issue with Mail Universal Security Groups with SP1. My account is an Organizational Admin and we have run the command to add the Security Group Creation and Membership Role to no avail. The only way we can manage these groups is via ADUC which is less than ideal.
 
Ã

Óli Þór

I have the same issue after installed exchange sp1. even all permission is showing correctly. this has only to do with " Mail universal Security Group" any suggest ?

I have only one Exchange server.
 
Ã

Óli Þór

i figure it out. I can change the group trough AD but not EMC.
 
B

Brian Day MCITP

Known issue that changed in SP1, EMC is no longer passing the -BypassSecurityGroupManagerCheck switch.Microsoft Premier Field Engineer, Exchange
MCSA 2000/2003, CCNA
MCITP: Enterprise Messaging Administrator 2010
Former Microsoft MVP, Exchange Server
My posts are provided "AS IS" with no guarantees, no warranties, and they confer no rights.
 
Status
Not open for further replies.
Thread starter Similar threads Forum Replies Date
K Backup recommendation for Exchange 2010 SP1 on Hyperv 2008 R2 Exchange Server Administration 3
M Exchange 2010 SP1 DAG & CA ARCserve Backup r15 Exchange Server Administration 1
A Exchange 2010 SP1 Edge Server ( Content Filtering ) Exchange Server Administration 0
F AD RMS with Exchange 2010 SP1 Exchange Server Administration 4
D Exchange Server 2010 SP1 Hosted Mode, service@ mailbox creation Exchange Server Administration 1
I Event ID 2937 after update to Exchange 2010 SP1 ArbitrationMailbox Exchange Server Administration 4
M Exchange 2010 SP1 Hosted Mode - how to move mailbox from old organization? Exchange Server Administration 1
S Owa failed to initialize after install of rollup 2 for Exchange 2010 SP1 Exchange Server Administration 9
P Journaling deployment Exchange 2010 SP1 RU1 Exchange Server Administration 1
I Event ID 2937 after update to Exchange 2010 SP1 Exchange Server Administration 8
G Exchange 2010 upgrade with SP1, language pack issue Exchange Server Administration 5
R Dynamic DNS update requirement for Exchange 2010 (SP1 RU1) on server 2008 r2 Exchange Server Administration 8
P Number of database on a server in DAG Exchange 2010 sp1 Exchange Server Administration 3
N Exchange 2007 SP1 + Outlook 2007/2010 - Autodiscover for Outlook Anywhere and Out of Office not working Using Outlook 1
A NetBackup 7.0 configuration for Exchange 2010 SP1 Exchange Server Administration 3
D Exchange 2010 SP1 OWA "reply" or "forward" error Exchange Server Administration 3
K Question about Exchange 2010 SP1 RU2 update Exchange Server Administration 3
J Exchange 2010 SP1 fails at Mailbox Error Unable to load exrpc32.dll Exchange Server Administration 4
D Exchange 2010 SP1 Policy to Delete mail in deleted items older than 30 days Exchange Server Administration 2
à Validating build of Exchange 2010 SP1 Exchange Server Administration 1
D Exchange 2010 SP1 topology prep error Exchange Server Administration 3
I Exchange 2010 sp1 Address Book service won't start after static RPC port reconfiguration Exchange Server Administration 2
D Installing SP1 for Exchange 2010 Exchange Server Administration 2
B Blank email list views on Outlook 2010 / 2007 with Exchange 2010 SP1 (on Citrix and Desktops) Using Outlook 7
S Exchange 2010 SP1 OWA Error Exchange Server Administration 2
P Mircrosoft Exchange 2010 SP1 Email Purge Exchange Server Administration 2
P Error 4999 after Exchange 2010 SP1 - No BES server Exchange Server Administration 12
D Upgraded to Exchange 2010 SP1 and now random Outlook clients are requesting authentication Exchange Server Administration 1
Q Don't have right permissions to assign "send as" rights in Exchange 2010 SP1 Exchange Server Administration 7
M Proper way to install Exchange 2010 SP1 on a CAS Array Exchange Server Administration 3
M Exchange 2010 SP1 Event id 9040 : Unable to save watermarks Exchange Server Administration 5
C Exchange 2010 SP1 "RPC can't be started because of the EMSMDB interface is already registered by Exchange Server Administration 4
N Failed Exchange 2010 SP1 Installation PowerShell "unauthorized operation" Exchange Server Administration 2
L Does Exchange 2010 SP1 update any Schema objects Exchange Server Administration 2
T After updating Exchange 2010 from RTM to SP1, OWA clients cannot move or delete emails Using Outlook 4
A The cluster network name is not online Exchange 2010 sp1 DAG Exchange Server Administration 8
P Exchange 2010 SP1 Cross Site CAS connection disable Exchange Server Administration 2
A Exchange 2010 SP1 RU1 Calendar Retention Exchange Server Administration 1
M Do Database Storage Limits in Exchange 2010 SP1 affect Archive mailboxes? Exchange Server Administration 5
L Exchange 2010 SP1 Pre-Req error Exchange Server Administration 2
W Exchange 2010 SP1 Install- Required HotFixes Exchange Server Administration 3
N Second Mailbox, Mails stuck in Outbox Outlook 2010, Exchange 2010 SP1 Using Outlook 8
S Determine Managed Folder Policy for Mailbox in Powershell Exchange 2010 SP1 Exchange Server Administration 4
C Installing Exchange 2010 SP1 in a Sub domain... Exchange Server Administration 5
K Exchange 2010 SP1 RU1 - Get-PublicFolderDatabase bug / documentation issue? Exchange Server Administration 6
D Ms Exchange 2010 - Sp1 Upgrade at Prerequisites on Hub Transport Role Exchange Server Administration 8
M Error Publishing Exchange 2010 SP1 OWA through ISA 2006 SP2 Exchange Server Administration 14
C Managed Folder does not show up in Outlook in Exchange 2010 Sp1 Rollup 1 Exchange Server Administration 3
J After Applying Exchange 2010 Sp1 Rollup the Build numbers in EMC remain unchanged 14.1.218.15 Exchange Server Administration 1
M how to upgrade exchange 2010 to exchange 2010 sp1 Exchange Server Administration 2
Similar threads


















































Top