Permission/Distribution

30 Nov 2005 5:27 PM

Kirrin Jones

Hey Newsgroup,

Now I would like to know, which group should I be creating in Windows
2003/Exchange 2003 if I would like to assign permissions and use as a
distribution list.

Maybe I'm missing something, but I just can't seem to get to it. I want
to create a group that I can use to assign permission to files/folders
(both in NTFS and Exchange), and also to be used as a distribution list
(in Exchange).

Which group with ADUC will allow me to do this?

I currently create two groups for the purpose, but when I want to assign
permissions in Exchange to public folders, I can't use the groups that I
had created, even though they say they are security groups.

Enlighten me!

Thanks

1 Dec 2005 4:06 AM

Rich Matheisen [MVP]

Kirrin Jones <kirrinjo***@gmail.com> wrote:

>Now I would like to know, which group should I be creating in Windows
>2003/Exchange 2003 if I would like to assign permissions and use as a
>distribution list.
>
>Maybe I'm missing something, but I just can't seem to get to it. I want
>to create a group that I can use to assign permission to files/folders
>(both in NTFS and Exchange), and also to be used as a distribution list
>(in Exchange).
>
>Which group with ADUC will allow me to do this?

Only security principals can be used for this purpose. Since a
distribution group, or a query-based distribution group, isn't a
security principal you'll have to use a security group.

>I currently create two groups for the purpose,

That's not a bad idea. You may, someday, have a need to add something
to the distribution group that shouldn't have access to protected
resources.

>but when I want to assign
>permissions in Exchange to public folders, I can't use the groups that I
>had created, even though they say they are security groups.

To use them in Exchange they'd have to be mail-enabled security
groups.

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.p***@getronics.com
Or to these, either: mailto:h.p***@pinkroccade.com mailto:melvin.mcphucknuc***@getronics.com mailto:melvin.mcphucknuc***@pinkroccade.com

1 Dec 2005 3:37 PM

Kirrin Jones

Thanks Rich, Its amazing that MS would not conceive that you would want
to assign permissions to the Exchange DLs. Crazy!

Kirrin Jones wrote:
Show quote

> Hey Newsgroup,
>
> Now I would like to know, which group should I be creating in Windows
> 2003/Exchange 2003 if I would like to assign permissions and use as a
> distribution list.
>
> Maybe I'm missing something, but I just can't seem to get to it. I want
> to create a group that I can use to assign permission to files/folders
> (both in NTFS and Exchange), and also to be used as a distribution list
> (in Exchange).
>
> Which group with ADUC will allow me to do this?
>
> I currently create two groups for the purpose, but when I want to assign
> permissions in Exchange to public folders, I can't use the groups that I
> had created, even though they say they are security groups.
>
> Enlighten me!
>
> Thanks

2 Dec 2005 3:09 AM

Rich Matheisen [MVP]

Kirrin Jones <kirrinjo***@gmail.com> wrote:

>Thanks Rich, Its amazing that MS would not conceive that you would want
>to assign permissions to the Exchange DLs. Crazy!

Why would I want to use something that's used to deliver mail used to
provide security? You can mail-enable a security group if you want to,
but then you have to be careful you don't do something silly and give
someone access to restricted information when all you wanted to do was
include them in the set of people receiving, say, a status report.

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.p***@getronics.com
Or to these, either: mailto:h.p***@pinkroccade.com mailto:melvin.mcphucknuc***@getronics.com mailto:melvin.mcphucknuc***@pinkroccade.com

Permission/Distribution - Which Group?