|
exchange
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Question regarding migration of Exchange 5.5 Distribution Groups2003. We have a very simple environment: 1 domain in the forest, 3 Exchange servers with about 350 mailboxes and about 50 public folders. Our Windows 2003 AD network is currently mixed-mode but we are currently running tests in our lab to determine the impact on Windows 98 and Samba clients of moving to a full Windows 2003 functionality level. I have been studying Kieran McCorry's book "Microsoft Exchange 2003 Deployment & Migration." In the book, it states (pg 56) "the Active Directory Connector will always map an Exchange 5.5 Distribution List across to a Universal Distribution Group (UDG) in the AD." I know that UDGs can exist in a mixed-mode Windows domain so this is no problem. I utilize the Distribution Groups in the Public Folder ACL's. I realize that the UDG's can't be used in a security context and must be converted to Universal Security Groups. These cannot exist in a mixed-mode domain and require that I upgrade my domain to Windows 2003 full functionality. What is the best way to convert the UDGs to USGs after the mode has been changed? Will this be done as a result of pfmigrate? -- Pat Allen Monterey Bay Aquarium Research Institute (MBARI) Hello Pat,
Thank you for posting here! According to your description, I understand that you want to know how to convert Universal Distribution Group (UDG) to a Universal Security Group (UDG) after your Windows domain is changed to Native-mode. If I have misunderstood your concern, please let me know. Based on my knowledge, you can directly convert the UDG to USG in Native-mode domain as below: (1) In Active Directory Users and Computers (ADUC), navigate to the Universal Distribution Group you want to convert (2) Select the group, right-click and select Properties (3) Under the General tab, select the Security radio button in the Group Type box (4) Click Apply (5) Click OK I hope the information above is useful. Have a nice day! Regards, Martin Qiu Microsoft Online Partner Support Get Secure! - www.microsoft.com/security When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ===================================================== Business-Critical Phone Support (BCPS) provides you with technical phone support at no charge during critical LAN outages or "business down" situations. This benefit is available 24 hours a day, 7 days a week to all Microsoft technology partners in the United States and Canada. This and other support options are available here: BCPS: https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469 Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/ If you are outside the United States, please visit our International Support page: http://support.microsoft.com/common/international.aspx ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. I was really curious if there was a way that these Exchange 5.5 Distribution
Groups would be converted to Universal Security Groups during the migration by the ADC if the Windows 2003 network is already in native mode. If not, how are the ACLs that are on my 5.5 Public Folders maintained when they're replicated to an Exchange 2003 using pfmigrate? Does the migration just ignore any UDGs that are in the ACLs? Does it apply any USGs? Thanks! Pat -- Show quotePat Allen Monterey Bay Aquarium Research Institute (MBARI) "Martin Qiu [MSFT]" wrote: > Hello Pat, > > Thank you for posting here! > > According to your description, I understand that you want to know how to > convert Universal Distribution Group (UDG) to a Universal Security Group > (UDG) after your Windows domain is changed to Native-mode. If I have > misunderstood your concern, please let me know. > > Based on my knowledge, you can directly convert the UDG to USG in > Native-mode domain as below: > > (1) In Active Directory Users and Computers (ADUC), navigate to the > Universal Distribution Group you want to convert > (2) Select the group, right-click and select Properties > (3) Under the General tab, select the Security radio button in the Group > Type box > (4) Click Apply > (5) Click OK > > I hope the information above is useful. Have a nice day! > > > > Regards, > > Martin Qiu > Microsoft Online Partner Support > > Get Secure! - www.microsoft.com/security > > When responding to posts, please "Reply to Group" via your newsreader so > that others may learn and benefit from your issue. > ===================================================== > Business-Critical Phone Support (BCPS) provides you with technical phone > support at no charge during critical LAN outages or "business down" > situations. This benefit is available 24 hours a day, 7 days a week to all > Microsoft technology partners in the United States and Canada. > > This and other support options are available here: > > BCPS: > https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469 > Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/ > > If you are outside the United States, please visit our International > Support page: > http://support.microsoft.com/common/international.aspx > ===================================================== > > This posting is provided "AS IS" with no warranties, and confers no rights. > > Hi Pat,
Thank you for your response. If you have already used a native-mode Windows domain for Exchange 2003 Server, the DL will be automatically converted to the USG. When Active Directory Connector (ADC) replicates a DL from Exchange Server 5.5 to Active Directory, it replicates it as a universal distribution group (USG). If the Information Store detects that that group has been used in the ACL for a folder, such as a public folder or a user's Calendar, the Information Store automatically converts the UDG to a universal security group (USG). For more detailed explanation, you can refer to the following Knowledge Base article: 297016 XADM: You Must Use a Native-Mode Windows 2000 Domain for Exchange 2000 http://support.microsoft.com/?id=297016 Note: The article also applies to Exchange 2003 Server. Please don't hesitate to let me know in case you have any further concerns. Have a nice day! Regards, Martin Qiu Microsoft Online Partner Support Get Secure! - www.microsoft.com/security When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ===================================================== Business-Critical Phone Support (BCPS) provides you with technical phone support at no charge during critical LAN outages or "business down" situations. This benefit is available 24 hours a day, 7 days a week to all Microsoft technology partners in the United States and Canada. This and other support options are available here: BCPS: https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469 Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/ If you are outside the United States, please visit our International Support page: http://support.microsoft.com/common/international.aspx ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights.  |
|||||||||||||||||||||||
Other interesting topics