Group ownership of Distribution Group not working

Hi,
We recently migrated from Exchange 2007 to 2013 CU2. We have various security groups with permissions to edit various distribution lists; this is no longer working. I've already researched the problem and I understand two things are necessary for a
user to have permission to edit a distribution list:
1. User must have membership in the My Distribution Groups and My Distro Groups Membership roles. Already done.
2. User must be an owner of the distribution group.  
The problem comes with the ownership. I'm assigning ownership of the distribution list to a security group, of which my test user is a member. Per
this article, groups can own groups again as of 2013 CU1.
If I directly assign a user ownership of the group, they can edit membership without issue, which means item #1 is satisfied. But they are not receiving ownership by way of membership in the group that owns the distribution list. Or put another way, their
group membership is not granting them ownership of the group as it should.
Any thoughts? Spent a good hour searching and can't come up with anything.
Thanks,
James

Hi -
That is correct, and is a problem with dozens of existing distribution groups.
For testing purposes I just did the following:
1. Created a new distribution group "Test Distro Group"
2. Created a new mail-enabled security group "Test Distro Group Owners"
3. Ran Set-DistributionGroup -Identity "Test Distro Group" -ManagedBy "Test Distro Group Owners"
4. Confirmed ownership via the shell:
Get-DistributionGroup -Identity "Test Distro Group" | fl
GroupType                                 : Universal
SamAccountName                       : Test Distro Group
BypassNestedModerationEnabled  : False
ManagedBy                                 : {contoso.com/Users/Test Distro Group Owners}
5. Confirmed ownership via ECP:
6. Added a test user "_Sample Teacher" to the "Test Distro Group Owners" group. Confirmed membership via ECP:
7. Logged into OWA as "_Sample Teacher," went to Options, then Groups. "Test Distro Group Owners" is shown as a group that the user belongs to, however no groups are shown under "distribution groups I own."
8. If I add "_Sample Teacher" directly as an owner of "Test Distro Group," the group appears as expected as an owned group.
So in short...the user is a member of the security group, the security group owns distribution group; the user should then be an owner of the distro group via membership in the security group, however this is not working.
Thanks for any help you can provide. I'm not sure where to go next.
James

Similar Messages

  • Response Groups not working

    Hi there
    My environment is a single Lync 2013 Front End Server installed on Server 2012.
    It works since a year and now we want to use some response groups. I created 2 of them and everything seems fine but i cant call these groups. Not from internal and also not from external.
    The clients shows an 500 internal server error with ID 26017.
    So i traced the whole thing on the Front End Server. It seems the Response Group Service cant work with the local SQL Server. I see three error messages.
    1. TL_ERROR(TF_COMPONENT) [2]0B90.37A8::07/23/2014-06:38:39.119.000002fb (RgsClientsLib,MatchMakingLocator.GetActiveInstanceFromDB:683.idx(479))
    (0000000000150BA8)No instance registered as the active instance!
    2. TL_ERROR(TF_COMPONENT) [1]1E08.2910::07/23/2014-06:38:42.462.00000a34 (RgsHostingFramework,CallControlManager.HandleAudioVideoCall:2049.idx(619))
    (000000000362D054)Call is declined because Call Control is not started.
    3. TL_WARN(TF_COMPONENT) [1]0B90.0B7C::07/23/2014-06:38:48.053.00000f2d (RgsClientsLib,MatchMakingLocator.GetActiveMatchMakingInstance:683.idx(301))
    (0000000000150BA8)There is currently no active MatchMaking instance in the pool.
    The Lync Server Event Log shows this error when the Response Group Service starts:
    LS Response Group Service ID 31067
    Lync Server 2013, Response Group Service Match Making could not find the Contact object used for subscribing to agents' presence.
    Cause: The application has not been properly activated or the Contact object was deleted.
    Resolution:
    Deactivate and then activate the application for this pool.
    Is there a way to reinstall / reconfigure the whole response group service incl. the active directory objects?
    I hope somebody could help
    Regards
    Andreas

    Have you seen this thread:
    http://social.technet.microsoft.com/Forums/lync/en-US/cd25ddec-6e1e-4d58-9a9a-a530abfa82e3/response-groups-not-working?forum=ocsclients ?
    He ran Get-CsApplicationEndpoint and received a warning that let him to a resolution.
    Short of that, I'd rerun step 2 in the deployment wizard and restart services when you can to see if I could jog anything loose.
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
    SWC Unified Communications

  • Multiple account assignment switching between distribution indicators not working for service

    Hi Gurus,
    Account assignment distribution function not working post ECC6 patching activity
    we have recently completed ECC6 patching actvity and we are facing issues on processing multiple account assignment in service.
    we create Purhcase order with single account assignment and will process service with Multiple account assignment selecting distribution on qty or percentage basis till patching functionality works fine post patching we are facing issue when we are selecting distribution indicator system provides an error message switching between distribution indicator is not allowed when we continue system ask to enter in case of multiple account assignment select the distribution indicator. could you please suggest me on the issue.
    Thanks in advance.

    we have found a SAP note
    1915000 - SE685 - Switching between distribution indicators is not allowed
    This is now standard behavior.

  • Send email when ownership is assigned' is not working

    Send email when ownership is assigned'
    is not working
    even though this option is disabled designer workflow task creation sends an email to the user when task is assigned to the user.
    We have october CU updates 2013.
    MCTS Sharepoint 2010, MCAD dotnet, MCPDEA, SharePoint Lead

    Hi Amit,
    Per my knowledge, if the task is created from a workflow, then you may use the task actions in the workflow.
    And some task actions will send an email to the user who the task is assigned to, so the email is sent from the workflow and it is not sent from the option “Send email when ownership is assigned”.
    If you are using 2013 workflow, the send email action cannot be prevented from the workflow.
    If you are using 2010 workflow, you can go into the task process to delete the Send an Email action.
    https://support.office.com/en-nz/article/Use-the-task-process-editor-for-approval-workflows-8680b4a4-36b1-441c-b070-e515976078aa#__toc264538566
    Thanks,
    Victoria
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Victoria Xia
    TechNet Community Support

  • Alert to group not working on Sharepoint 2010!

    Hello,
    We have a SharePoint 2010 Server which on the front page we have a news list. We have migrated to 365 and since then the alerts are not working properly. We have a local SMTP server that we use to rely to 365 since SharePoint does not support TLS by itself.
    The SMTP server is working because we can set up alerts on individuals and the emails are coming. The issue is with the group. I have tried several groups but still the same issue. On some groups we receive the initial email about the creation of the alert,
    but no mails after that. I have checked also the Immediate Alert service and is successful. I have checked in the  mail flow on 365 and I can see the initial creation of the alert mail sent to all in the group, but the alerts on changing anything on the
    list does not come into 365, so it must be a SharePoint issue which I can`t determine since the immediate alert service is running...
    Can you please provide a feasible solution for this issue?
    Thank you very much.
    DOVC
    Best Regards, Valentin Doru System Administrator

    Hi Valentin,
    please also open a thread at o365 community, because seems this issue happened at o365.
    to try, perhaps you can re-add the group also, because it may refresh the properties from the AD group to o365.
    and you may check these workaround for testing:
    Option 1: Use a Redirection User
    created a user in Office 365. This user is licensed to use SharePoint Online and Exchange Online.
    In Exchange Online, create Distribution Groups, which are standard Distribution Group that allows however in Delivery Management also Senders outside of organization, as the SharePoint Sender is not part of the Exchange Org.
    In Exchange Online for the User Exchange Forwarder, created Inbox Rules. The rule is checking the Subject for a keyword and as action redirect the E-Mail to the DG and deletes it right away.
    repeat this for other DGs as well.
    In SharePoint Online grant the user Exchange Forwarder access to the Site to access the List
    Now there are two important steps:
    1)      The Alert Title needs to include the token we look for in the Exchange rule
    2)      The “Send Alerts To” needs to be our “Exchange Forwarder”
    When everything is set up an Alert will be received by Exchange Forwarder and then forwarded to the DG.
    Option 2: Use a custom Workflow with the Send E-Mail To Activity
    In Exchange Online creat a Distribution Groups, which are standard Distribution Group that allows however in Delivery Management also Senders outside of my organization, as the SharePoint Sender is not part of the Exchange Org.
    Using SharePoint Designer create a custom Workflow like the one below. In the Send E-Mail activity I specified the external SMTP Address of the DG as To-Address.
    When the Workflow is executed an E-Mail is sent directly to the DG:
    Background:
    When sending an Alert, SharePoint is doing a Security Trimming. So SharePoint wants to be sure the recipient of the Alert has permissions to see the List Content the Alert is about. Therefore we cannot enter an SMTP-Address for an Alert but need to specify
    a Security Principal known to SharePoint.
    In a Workflow we don’t need to do this kind of Security Trimming. The creator / designer of the Workflow need to take care whom to send what information.
    Side note: Alerts and Workflow Send E-Mail To Activities are the only possibilities in SharePoint Online to send E-Mails. Custom solutions (Sandboxed Solutions) will not work.
    Regards,
    Aries
    Microsoft Online Community Support
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Server Group not working when one of Job Servers is down

    I have a Server Group of two job servers. They have the same version 12.2.2.3 and are attached to the same Local Repository of version 12.2.2.0.
    When I execute a batch job (from the Designer) and explicitly specify on which job server it should run, it works fine for either job server. Also, when I specify Batch Job execution on Server Group, it works fine.
    However, when I shutdown one of the Job Servers, and then try to execute the job on Server Group, I'm getting two error messages, BODI-1111011 that one Job Server is down, and BODI-1111009 that another Job Server has failed.
    At the same time, when I check the Server Group in the Management Console, it shows that the allegedly failed Job Server is in the status green.
    That error is not reflected in a job server eveng log, nor there is anything written to webadmin log, not in the job trace (the latter isn't created at all).
    Is there anything I can do at this point except raise a support message?

    The issue was with different users for Local Repository in Admin and Job Server config. I discovered it when trying to run the job from Admin Console. Designer is probably not the best diagnostic tool for such kind of issues.

  • Groups not working in apple mail

    Hi,
    Since the update to 19.9.1 mail groups began working again, but now they've stopped.  It used to be I could enter the first few letters in the address field and either a person's or group's name would show up to be selected.  Not groups don't show up anymore.
    Any idea why?

    Hi!
    I have the same Problem... Did u try to delete the "Envelope Index"? ( got to Library/Mail/V2/... delete all files Envelope ... Close Mail before! and then restart Mail.)
    I tried that but nothing happen... How tu use Mail without search feature!!
    MacBook Pro late 2009, Mac OS Yosemite (10.10)

  • Smart groups not working

    Whenever I try to set up a course as a smart group, not only do I not see any options (see http://tinyurl.com/34rnar6 ) but I get the warning "We could not complete your iTunes store request. The iTunes store is temporarily unavailable. Please try again."
    Has this been happening for a while, or am I just hitting the system at a bad time?
    Thanks!

    I have had this issue also since June 6th. Glad (and sorry) to hear others are having the same issue.
    In addition to the original problem (see image in the first post), I have had other strange behaviors. I thought some Smart groups were corrupted, so I deleted then and tried to start over. When I tried to create new ones, sometimes it would open a different smart group (one was even not from our site). There seems to be much confusion.
    Creating a new Smart group, I entered a title, and when I clicked on the + button to add a new row, it came up with all the lines of a different smart feed. On other attempts, I could add 1 or 2 lines before it would blank out like the original image shows. This happens on both my Mac and PC. It is causing large holes in our website.
    Some links to the pages are:
    Old but working: http://deimos3.apple.com/WebObjects/Core.woa/Feed/mdanderson.org.3116309021.0311 6309027
    New and failed to create (got one in): http://deimos3.apple.com/WebObjects/Core.woa/Feed/mdanderson.org.3336851257.0333 6851263

  • Active Directory Groups Not Working in Sharepoint

    We are trying to manage permissions with AD groups but thus far permissions are not working.  We have a site and are able to search for, find, and add AD groups.  However, users in this group still get access denied.  If users are added explicitly
    to the site or to a SharePoint group their permissions work correctly.  The UPS has been synced many times without issues and this problem has been occurring for weeks.  Is this a problem with SharePoint or AD?  Any ideas how to resolve it?
    Also, I don't know if this is relevant but the site is also configured for anonymous access.  If a user accesses the site anonymously they are granted read access, if they try to access the site while logged in with their account they get access denied.

    If the group was added to SharePoint and then users were added to the group try waiting a day.  The claims token in SharePoint lifetime is fairly long.  So when new users are added to an existing AD group SharePoint will not recognize the new membership
    in the Claims token for 12 -24 hours.  If you add a user today they should be able to log in tomorrow.  Take a look at the following Blog post.  I think this is your issue.
    http://www.andrewjbillings.com/sharepoint-2013-claims-authentication-ad-group-changes-not-reflected/
    Paul Stork SharePoint Server MVP
    Principal Architect: Blue Chip Consulting Group
    Blog: http://dontpapanic.com/blog
    Twitter: Follow @pstork
    Please remember to mark your question as "answered" if this solves your problem.

  • Site column Person or Group not working through TMG

    We published our Sharepoint 2010 Site through TMG 2010, everything is working fine, except some users cannot edit the site column Person/Group in the document library. The Word 2013 opens and in the field we just see not currently available. I
    have some users with Word 2013 where it's working fine, so I think this must be some word settings.
    Any ideasß

    Hello,
    I have a similar problem (same Setting).
    I get the error message that the sharepoint "saving/storing location" could not be interpreted (translation
    from the German error message), after I was prompted for the user credentials. I do not get an error message on server side.
    The TMG Settings:
    Rule applies to published site: wi-sharepoint
    Request appear to come from the Forefront TMG computer
    Listener : https; 8443
    Public name (changed): something.tech.at
    Authentication: NTLM auth.
    Bridging: Redirect top HTTP: port 81
    Apply link translation to this rule
    This setting works if I connect via a browser (from inside and outside)
    But trying to connect via Workspace 2010 I get an error from outside (from inside it works)
    The log from the TMG:
    SourceExternal: 80.081.215.166:4881 (changed)
    Destination: Lcoal Host (192.168.50:81)
    Request: POST
    http://wi-sharepoint:81/...
    On the Sharepoint I configured AAM:
    http://wi-sharepoint
    DEFAULT => http://wi-sharepoint
    http://wi-sharepoint:81
    Internet => http://wi-sharepoint:81
    I also tried to add:
    http://something.tech.at
    => http://something.tech.at
    and
    http://something.tech.at
    => http://something.tech.at
    but it was not working correctly.
    Hope you can help.
    Thanks,
    Florian

  • HT2486 Smart Group not working for Multiple 'Not a Member of' Options

    I am trying to go through my contacts and assign everyone to a group.  I want to create a smart group whose criteria is "not in Group 1" AND 'Not in Group 2'.
    This does not work.  It simply gives me all the contacts.
    Also, is there anyone to see a contact and know to which groups they belong.  When I can't remember who someone is, it is helpful if I know what group.

    I have a different conclusion : for me, it works since 10.9 where it has never worked before (and I just checked it still works with 10.9.1) !
    I did not modified my groups, they simply started to work properly with 10.9.

  • Javascript for hide sale price and grouping not working in IE9

    the following code is not working in IE9. does anyone know how to fix this? anyone else having this issue?
    <script type="text/javascript">
    var opt = document.getElementById('grouping');
    if(opt.innerHTML == 'Choose One ') opt.style.display='none';
    </script>
    <script language="javascript"><!--
    var onsale_{tag_productid} = "{tag_onsale}";
    if (onsale_{tag_productid} == "0") {
         document.getElementById("rrpprice_{tag_productid}").style.display = 'none';
    //--></script>
    <script type="text/javascript">
    document.getElementById('catdesc').style.display = "none";
    </script>

    You can look at this link:
    http://vanderwal.com/limited-edition-nautical-panoramic-prints/g16-the-north
    -light-and-sachem-pond-block-island
    But it needs to be viewed in IE9 because that is where the issue is. For
    some reason the JS is not hiding the sale price or the grouping.

  • Element htmlb:group not working.

    Hi All,
    I need to group some logicaly related elements in the BSP page, i tried using the BSP HTMLB element GROUP , but for some reason it does not make any difference in the BSP page.I have seen the HTMLB_SAMPLES and SBSPEXT_HTMLB applications and tried using the same logic......but not working.
    <htmlb:group id        = "group1"
                  title     = "Test Group"
                  tooltip   = "This is a tooltip" >
          <htmlb:groupHeader>
             <htmlb:textView id="mytext" text="This is a test" tooltip="Test Text Tooltip">
             </htmlb:textView>
            </htmlb:groupHeader>
                 <htmlb:groupBody>
        SOME ELEMENTS HERE    
    </htmlb:groupBody>
               </htmlb:group>
    I have  a Gridlayout divided into 2 columns and 6 rows , i want to group only the last two rows  ie 5 & 6 into a group.
    What might be the problem?
    Thanks,
    Anubhav.

    Hi,
    if I understand, you´re trying to group rows in your grid control and NOT related elements (like radiobuttons), as stated. That´s why it does not work with <htmlb:group>.
    I assume you have a code like this:
    <htmlb:gridLayout columnSize="2" rowSize="3" cellPadding="5">
      <htmlb:gridLayoutCell columnIndex="1" rowIndex="1">Field 1</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="2" rowIndex="1">Value 1</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="1" rowIndex="2">Field 2</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="2" rowIndex="2">Value 2</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="1" rowIndex="3">Field 3</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="2" rowIndex="3">Value 3</htmlb:gridLayoutCell>
    </htmlb:gridLayout>
    how about if you change it like this:
    <htmlb:gridLayout columnSize="2" rowSize="2" cellPadding="5">
      <htmlb:gridLayoutCell columnIndex="1" rowIndex="1">Field 1</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="2" rowIndex="1">Value 1</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="1" rowIndex="2" colSpan="2">
      <htmlb:gridLayout columnSize="2" rowSize="2" cellPadding="5">
      <htmlb:gridLayoutCell columnIndex="1" rowIndex="1">Field 2</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="2" rowIndex="1">Value 2</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="1" rowIndex="2">Field 3</htmlb:gridLayoutCell>
      <htmlb:gridLayoutCell columnIndex="2" rowIndex="2">Value 3</htmlb:gridLayoutCell>
      </htmlb:gridLayout>
      </htmlb:gridLayoutCell>
    </htmlb:gridLayout>
    In this way, you´re "grouping" rows 2 and 3 within another grid.

  • Enabling the wiki service for a group not working

    Hey all,
    I am getting my server up and running and I have the following services: AFP, DNS, and Web. I am currently trying to enable the use of a Wiki but am running into some problems. I have enabled Wiki and blog in the Web Services in Server Admin and I have added the groups I wish to be able to use the Wiki. When I go to Workgroup Manager, I get stuck. In the Accounts tab and the group I am trying to give access to, I attempt to use the pulldown tab to "Enable the following serves for this group on:" I would like to get the pulldown to be set on "Default web site of server17.pretendco.com, but I cannot even use the pulldown. It is grayed over, and I cannot change the settings.
    I am using the Administrator account, so I should be able to change that. Any ideas?
    Thanks
    Pat

    Hi
    The reason the option is grayed out for your users is because your server is not an OD Master. Wiki, Blog and iCal won't be available unless this happens first.
    Page 61 Web Technologies Admin Manual
    Wiki will not work without a local Open Directory master. Your server can be connected
    to another directory server simultaneously, but for wiki to work, your server must be an
    Open Directory master. For more information, see Open Directory Administration.
    You can download the relevant manuals from here:
    http://images.apple.com/server/macosx/docs/WebTechnologies_Adminv10.5.pdf
    http://images.apple.com/server/macosx/docs/OpenDirectory_Admin_v10.5_2ndEd.pdf
    Other manuals may also be of use:
    http://www.apple.com/server/macosx/resources/
    Open Directory requires a tested and configured Internal DNS Service resolving on the forward and reverse lookups. DNS does not need to be running on the server itself just as long as it is running on a server on the same network. Don't confuse internal DNS Services with the external ones you are used to.
    Tony

  • ICloud Contact Groups Not Working on iPad

    I made a contact list on iCloud.com via my Mac Book (OS X Yosemite).  The groups I created there do not work with iPad Air 2 mail. They show up on the iPad, but I cannot send emails to my groups.  What do I need to do to make groups work?

    Maybe the backup is corrupted.
    Turn off iCloud backup and try deleting the iCloud backup for the iPad.
    iCloud: Remove an iOS device backup from iCloud - Support - Apple
    Then turn it back on and try to backup.
    You can also try removing your iCloud account from the device and then re-add it.
    Note: This will cause you to lose everything but the last 30 days of photos in your My Photo Stream so take precautions.

Maybe you are looking for

  • ITunes music for different family members

    Hello I have just purchased my first Mac, a standard 27" iMac (seems strange to call this wonderful - so far - Mac 'standard'!), I have transferred my iTunes music from my Sony Viao Laptop. This music, with one exception, is from my own CD's, with on

  • Acrobat Pro 9- turn of update for all users in terminal environment

    I have Adobe Pro 9 installed on several terminal servers. Everytime users login they are seeing an insufficient rights for updating Adobe. I don't want to give them rights but the Configuration Wizard isn't out yet. The sales department conveniently

  • Call a dll with an activeX component gives error

    Hello all, My program consist of: - Main program - DLL's How it works: The main program is the interface for the user, this main program call's several dll's The problem: The main program runs withought problems, but when it call's a dll, which also

  • Do I need LTE on a i-pad if i have a i5 phone

    Do I need LTE on an i_pad if I already have and i-5 phone?

  • ODP -9.2.0.4.01 - Syntax change

    Hello, I wrote the DAAB for ODP.net in ODP - 9.2.0.2. Recently my client upgraded to ODP -9.2.0.4.01. Surprisingly i got the syntax error on the following line: Dim localParamers As New OracleParameterCollection ODP -9.2.0.4.01 doesn't have the publi