Managing Distribution Groups with hidden membership (when hideDLMembership is true)

Hi All,
I have a
situation in a Exchange 2010 SP2 messaging environments where we want to manage two distribution groups through Outlook client and want to ensure that its membership is visible to none but the distribution group owners.
I have followed this article "http://blogs.technet.com/b/kamleshk/archive/2013/08/22/3478284.aspx" but in my case the owner can't see the membership.
The Outlook client version is 2007.
I have enabled "MyDistributionGroups" in the default role assignment policy to enable Distribution Group management by end users.
We use Outlook Anywhere but I have tried to add the registry Key "DS Server" but no way.
Thank you in advance.
Simone
Simone

Hi Simone,
How about in OWA?
If OWA works well, it should be an issue on the Outlook Client side.
If OWA not works neither, it still the permission issue. It need sometimes to sync the operation.
Please run following command to verify the owner permission:
Get-DistributionGroup -Indentity DGName | FL
Thanks
Mavis
Mavis Huang
TechNet Community Support

Similar Messages

A distribution group with "require all senders are authenticated" checked still receives external mail

a distribution group with "require all senders are authenticated" checked still receives external mail. this does not happen for any other DG i am aware of. this also happens from multiple external senders.
please assist.
thanks

Hi,
From your description, I would like to verify if the problematic Distribution Group is a member of other distribution groups that don't check "require all senders are authenticated".
What's more, please check if there is any difference between this problematic distribution group and other normal distribution groups.
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Cannot manage Distribution group membership when two exchange accounts are configured in outlook.

Hi,
I am using outlook 2013 and my exchange server is 2013 too.
I have a distribution group named "[email protected]" and my user "[email protected]" is moderator of this DL and i was able to add/remove members from this.
Now, I own one more exchange account as "[email protected]" and i configured the same in outlook 2013 as an exchange account and what i see is i am unable to edit the DL "[email protected]"
My default account in outlook is "[email protected]" still i cant edit the DL. As i delete the account "[email protected]" from outlook or configures it ([email protected]) as an IMAP i am able to moderate "[email protected]".
Any Clue ???
Error message :- "Changes to the distribution list membership cannot be saved. You do not have sufficient permission to perform this operation on this object."
My Exchange server 2013 and outlook both are having latest updates installed. Thanks.

I have configured second account as Exchange only in the same Outlook profile. I don't want to switch my profiles to operate the either the accounts.
Both the accounts are different and don't have any relevancy to each other. "[email protected]" and "[email protected]"
What i suppose is, "[email protected]" is having permissions on the DL "[email protected]"
but "[email protected]" dosent have it. So when i edit "[email protected]" outlook is
using "[email protected]" to edit it and not "[email protected]"

Can't manage distribution group from Outlook with Exchange 2010 or Exchange 2013 mailbox

Hi All,
In my environment we are using exchange 2010 that contains the distribution groups which has been migrated from exchange 2003 environment .On that one of the distribution group is having an problem for the user who had an access to manage DL'S via outlook
but he can't able to manage it.When we add the new user to manage same DL and the new user tries to manage the DL via outlook it happens without any issues.
issue occurs only for the user who has already have the manage access permission on the DL where the group was on exchange 2003 before migrated to exchange 2010.
Reffered blog : http://support2.microsoft.com/kb/2586832?wa=wsignin1.0
We have done all the settings defined on the above mentioned link but still we are facing the issue.
In addition to that , we have forcefully upgraded the DL too by using the below mentioned command.
set-distributiongroup -identity "name of the problematic DL" -forceupgrade
Please all of you provide your valuable suggestions to overcome this issue .
Error message :
Regards
S.Nithyanandham
Thanks S.Nithyanandham

Hi S.Nithyanandham,
From your description, I would like to verify if the problematic manager user is a member of security group. If yes, this issue will occur. In Exchange 2010, distribution groups can't be managed by groups, only individual users can manage groups. But in
Exchange 2003, it is possible to use groups to manage a distribution group.
For more information, here is a blog for your reference.
How to manage groups with groups in Exchange 2010
http://blogs.technet.com/b/exchange/archive/2011/05/04/how-to-manage-groups-with-groups-in-exchange-2010.aspx
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Manage Exchange Distribution Group with Dirsync

Hi,
Our environment, installed DirSync and no on-premise Exchange in environment. In Office 365 portal, if I need to change Exchange distribution Group, it require to change on-premise AD.
The question is if I want to update "ownership memeber" (not group memeber) and "membership approval" attribute, how can I do without EMC ?
thanks
Keith

This belongs in the Exchange forum, I will move it there.
Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security, BS CSci
2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
Please no e-mails, any questions should be posted in the NewsGroup.
This posting is provided AS IS with no warranties, and confers no rights.

Send as Distribution group with a mailcontact

Hello,
We're having problems to grant a mailcontact (external of our domain) with send as permission on a distribution group. We've tried already through ADUC's security tab...and the problem is that the mailcontact does not appear, so we can't add the send as permission.
Otherwise using the get-mailcontact cmdlet it appears as a mailcontact, and it's listed in the EMC list as well.
Also trying through powershell it seems that won't work with:
[PS] C:\Windows\system32>Add-ADPermission "DistributionGroup" -User "MailContact" -Extendedrights "Send As"
It says:
User or group "MailContact" wasn't found. Please make sure you've typed it correctly.
So I was wondering, how can I especify that it's not a User but a MailContact?
Many thanks in advance!

Hi,
As what Steve says, we can’t give send as permission to a MailContact. As a workaround, I think we can create a mail user with [email protected] account in AD. Then give full access permission with a domain mailbox(UserA) and set
Send As permission to this mail user for the distribution group:
1. Create a Mail User:
http://technet.microsoft.com/en-us/library/bb124381(v=exchg.150).aspx
2. Set Send As permission:
Add-ADPermission "DistributionGroup" -User "MailUser" -Extendedrights "Send As"
3. Assign Full access permission to the mail user to make sure there is a mailbox for this user:
Add-MailboxPermission “UserA” -User "MailUser" -AccessRights FullAccess
Then we can configure the mailbox(UserA) with MailUser account and send as the distribution group in Outlook client:
1. Open Control Panel > Mail > E-mail Accounts > New.
2. In the Auto Account Setup window, fill in the E-mail Account name(UserA) and E-mail Address([email protected]). Then click Next without type Password.
3. Click Finish to close the window.
4. Open Outlook and a Windows Security window would pop-up. Please use MailUser account information(User name: Domain\MailUser and Password) to log into this mailbox.
5. Click New Email > OPTIONS > From, then the From field is shown in the message.
6. Click From > Other E-mail Address, and select the DistributionGroup.
Then this external user can send as this distribution group.
Hope it helps.
Regards,
Winnie Liang
TechNet Community Support

Create and Manage Distribution Groups

You've removed the "Go to the earlier version" option from Outlook Web App. Now how are my users expected to administer the Distribution Groups they own?

Hi,
This is the forum to discuss questions and feedback for Microsoft Office client. For Outlook Web App for Office 365 related questions, I would suggest you to post in the dedicated forum of
Office 365 Community, where you can get more experienced responses:
http://community.office365.com/en-us/f/158.aspx
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
Regards,
Ethan Hua
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Problem with hidden objects when moving layers, groups or artboards

Hi there,
I am using Illustrator CS5.5 on a Mac.
Sometimes, after moving stuff around (groups, layers or artboards), I notice that hidden objects didn't move with everything else.
Does somebody knows how this can be if no objects are locked ?
I cannot make this happen on purpose with a simple example and it is really annoying not to be sure that everything was moved properly.
Thanks
R.

Emil,
A little misunderstanding here.
Like you say, clicking on the target to select (targeting objects) : this is exactly what I do.
So, SOMETIMES, when I select a group (not a layer) which contains hidden objects by clicking on its target in the layers panel, only the visible objects get selected (i.e. : only the visible objects get a full square at their right in the layers palette and the group gets a small square) AND the group is NOT targeted at all (i.e. : the target of the group is not highlighted, only the targets of the selected (visible) objects within the group are highlighted).
Then, if I move the group, only the visible objects are moved because only those are selected.
Problem is that I don't know why but when doing this (targeting objects), SOMETIMES this result in selecting everything within the group BUT SOMETIMES it result in selecting only the visible objects withtin the group.
I don't know what triggers that difference in behavior.
R.

Issues creating dynamic distribution group with PowerShell

I am trying to create a DDG with the following filters: Mailbox Users, specific OU and not member of a certain group. This script works fine (minus the exclusion):
New-DynamicDistributionGroup -Name "1Test1" -RecipientContainer "OU=ABC,DC=xyz,DC=com" -IncludedRecipients 'MailBoxUser'
\When I change the script to exclude members of the group the DDG is blank:
New-DynamicDistributionGroup -Name "1Test1" -RecipientFilter {(RecipientType -eq 'UserMailbox') -and (MemberOfGroup -ne "CN=1ExcludeDynamic,OU=ExchangeGroups,DC=xyz,DC=com") -and (RecipientContainer -eq "OU=ABC,DC=xyz,DC=com")}
Any ideas will be appreciated.

All right. That's a good thing. Now create another new DDL using the Powershell cmdlet and the values you got from the "RecipientFilter" and "RecipientContainer" properties. Then verify that you get the same results as you do when you ran this on the one
you created with the GUI:
Get-DynamicDistributionGroup
'NewGroup' | fl Name,RecipientContainer,RecipientFilter,LdapRecipientFilter
and
$g=Get-DynamicDistributionGroup NewGroup
(Get-Recipient
-RecipientPreviewFilter $g.RecipientFilter
-OrganizationalUnit $g.RecientContainer).count
If you do, then run a Get-DynamicDistributionGroup GROUPNAME | Set-Dynamic -RecipientFilter
{(RecipientType -eq 'UserMailbox') -and (MemberOfGroup -ne "CN=1ExcludeDynamic,OU=ExchangeGroups,DC=xyz,DC=com")}
Then see if it works as expected. If it doesn't try this:
Get-DynamicDistributionGroup GROUPNAME | Set-Dynamic -RecipientFilter {(RecipientType -eq 'UserMailbox') -and -not (MemberOfGroup -eq "CN=1ExcludeDynamic,OU=ExchangeGroups,DC=xyz,DC=com")}
--- Rich Matheisen MCSE&I, Exchange MVP

Unable to group with page breaks when creating pivot table in BIP

Hi,
I'm using BIP 10.1.3.4 and I need some assistance with report with pivot tables. I used the wizard to successfully create the pivot table but i need to add a group and break the page on that group. Is there any way i can do this?
Thanks.

HI Bala,
I am Durgaprasad from Pune-INDIA, working as a OBIEE developer, I have one query which I mentioned below can you please go threw it.
I have done migration Discoverer Admin EUL Layer into OBIEE repository using below methodology.
Navigate to the <installdrive>\OracleBI\server\Bin directory. There are two important files in this directory: the migration assistant executable file named MigrateEUL.exe and a properties configuration file named MigrationConfig.properties.
Could you please help me how to migrate discoverer plus workbooks and worksheets into OBIEE Answers?
go through below link, It will show navigation steps for migrating of EUL from Discoverer to OBIEE.But i need migration of workbooks and worksheets from Discoverer into OBIEE Answers.
http://www.oracle.com/technology/obe/obe_bi/discoverer/discoverer_1012/discomigration/migrate_disco_biee.htm
This is very great full help to me …
Advance thanks for your suggestions.
Regards
Duraga Prasad.

Giving Permissions to specific Distribution Group management for deparment secrety

Dear ALL
In our exchange 2010 environment we have multiple departmental distribution group.
We plan to give management of these distribution group members to each departmental secretary.
How can achieve this?
Kindly help
Ashraf

All very valid points!
The one thing I'd ask you to think about is whether or not you should change the default role assignment policy. If this is for a handful of users, create a new Role Assignment policy, tweak that (using the steps below) and then assign your new one
to these users that need to manage the DGs.
http://blogs.technet.com/b/rmilne/archive/2013/08/09/allow-users-to-manage-distribution-groups-without-creating-new-ones.aspx
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Cannot create a group with no members through DAS

I'm using OID 10.1.2.0.2.
It seems that the DAS Self Service Console cannot work with groups with no members:
- When creating a group, it always assigns orcladmin as a member.
- When deleting the last member from a group, an error is shown ("Require at least one user or group member").
- If you create an empty group via other means (e.g. the oidadmin tool), the group will not be visible in the "role assignment" section when creating a new user (even though we enabled that group for role assignment in the "user entry" configuration). After adding one member through the "edit group" page, the role shows up in the role assignment section.
I have a couple of questions regarding this:
1) Is this limitation (group must have at least one member) an ldap or OID limitation, or is it only a DAS or even "self service console" limitation?
2) Why is this limitation there?
3) Is there a way to work around this, i.e. make self service console be able to handle empty groups?
Any help would be greatly appreciated.
Regards,
Johan

I do not agree that a group owner should be a member of that group. For example, I have a group "admins" and a group "analysts". The "admins" group is owner of the "analysts" group, since the users in the "admins" group must be able to create users and assign them to the "analysts" group. However, the "admins" group is not member of the "analysts" group, because I do not want the admins to act as analysts in my application. Ownership of a group (being able to manage it) and membership of a group are two different things. Besides, I also do not understand why the OIDDAS makes the orcladmin user a member of every group that you create there.
Of course, eventually I will have members in my group. But why is it a problem that there are initially no members of a group? I see no reason at all why this would be a problem.
The reason why I ask this is that creating an empty group (initially) is a requirement of my setup process. I am trying to release a clean setup script (with an ldif file) out of development, that our operational department can use to set things up. I want my ldif file to prepare all the necessary groups and owners, but not to create members in those groups (that's the task of the operational people).
However, as soon as I have these empty groups in place, the OIDDAS starts to act strangely (namely, the groups are not visible in the "role assignment" section when creating a user, until there is at least one member in the groups). That's when I found out that the OIDDAS actually does not like having empty groups (error when creating group without members, error when removing last member, ...).
If anyone knows, can you give me one good reason why the OIDDAS does not allow empty groups (or making groups empty)? As far as I can see, the OID/LDAP itself does not have a problem with this (you can create an empty group without any problem via the oidadmin application, or via import of an ldif file).
Thanks,
Johan

Hosted Exchange Distribution groups i am part of

Hello,
I have setup a Hosted Exchange environment, i am filtering on ExtensionAttribute1 between company's.
Now when i create a Distribution group with ExtensionAttribute1 filled in this is still displayed when a users goes to OWA --> Options --> Groups When the user clicks on the butten to let him decide where to be a member of he will see all Distribution
Groups there are, regarding what i set in ExtensionAttribute1, so i have to hide all my Distribution Groups.

The only workaround is to remove the group option from OWA as the Address book Policies (ABP), that I assume you setup, don't effect that view.
ABP's don’t apply to the Get-Group cmdlets. Therefore, any user or process that is able to run Get-Group will see all members of any group
they have access to.
We recommend that you modify the group management settings of the OWA Options so users can’t use Outlook Web App to manage groups. To prevent users from using OWA Options to manage groups,
exclude the users from the MyDistributionGroupMembership RBAC role. For details, see MyDistributionGroupMembership role.
http://technet.microsoft.com/en-us/library/jj657455(v=exchg.150).aspx
DJ Grijalva | MCITP: EMA 2007/2010 SPA 2010 | www.persistentcerebro.com

Forward Emails - Distribution group setup Question

Using Exchange 2013. We have a user in AD called Purchasing User that has email address of
[email protected] and mailbox in Exchange. We want any emails that go to
[email protected] to be forwarded to (3) other recipients in the same AD (internal users). In Exchange we tried creating a Distribution Group with those 3 members, that we could forward to, but when that
Group gets created it automatically created an email address called
[email protected] (that does not exist at our Email host) and the forwarding failed.
1. Are we instead supposed to create the group in AD?
2. When the recipients get the email, will they see the sender's information or will they see the DG info--we want them to see the sender's info.
Thanks!

Did you try setting the forward from the powershell? If not please creating a group and try the below command.
Set-Mailbox –identity [email protected] –ForwardingAddress [email protected] delivertomailboxandforward $true
If you don't want to deliver to the original mailbox type "deliverytomailboxandforward $false" at the end
If you dont want to forward without delivering to the original mailbox, I would suggest you to delete the [email protected] mailbox, Create a distribution group with email address [email protected] and add the required members to the group.
Thanks, MAS
Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Single Mailbox receiving 432-4.3.2 STOREDRV; mailbox server is too busy error emailing distribution group

I have a user who is trying to email a distribution group with approximately 185 recipients, 183 internal, and 2 external.
The user is recieving message delayed/pending for some (but not all) of the recipients. Approximately 15 recipients have recieved the mail including the external recipients and did so shortly after the mail was sent, however, 168 recipients have not recieved
the email and when I search for the mail in Message Tracking on the server, the pending recipients have the following error:
Submitted
04/12/2013 11:56 BTSDCAEXCMDB02.one.local
The message was submitted to btsdcaexccas02.one.local.
Group Expanded
04/12/2013 11:56 btsdcaexccas02.one.local
The list of members of the group "All TCP Users" was expanded so that the message can be delivered to each recipient.
Pending
04/12/2013 11:56 btsdcaexccas02.one.local
The message has been queued on server 'btsdcaexccas02.one.local' since 04/12/2013 11:56:48 (UTC) Dublin, Edinburgh, Lisbon, London. The last attempt to send the message was at 05/12/2013 12:08:22 (UTC) Dublin, Edinburgh, Lisbon, London and generated the error
'432-4.3.2 STOREDRV; mailbox server is too busy 432 4.3.2 STOREDRV.Deliver.Exception:StorageTransientException.MapiExceptionNotEnoughMemory; Failed to process message due to a transient exception with message Cannot set search criteria in SearchFolder. Try
using fewer keywords at the same time, reducing the number of users in the From, To, Cc, and Bcc fields, and reducing the number of mailboxes that are searched at the same time. 16.55847:42000000, 17.43559:0000000090020000000000000000000000000000, 255.23226:2B0A0000,
255.27962:30000000, 255.17082:F0030000, 0.27745:80030400, 4.21921:F0030000, 255.27962:FA000000, 255.1494:00000000, 255.1238:31000000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000,
4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000,
4.7155:F0030000, 4.7155:F0030000, 4.7155:F0030000, 4.6131:F0030000, 4.7728:F0030000, 0.59311:F0030000, 4.8112:F0030000, 255.1750:00000000, 0.26849:00000000, 255.21817:F0030000, 0.30353:00000000, 4.19089:F0030000, 0.18065:0E000000, 4.26257:F0030000'.
05/12/2013 12:08 btsdcaexccas02.one.local
Message delivery is taking longer than expected. There may be system delays. For more information, contact your helpdesk.
Can anyone help as to what is going on here? This only seems to be affecting a single user, and it is intermittent as some recipients received the email, whilst others have not.

Hi Leo,
From your description, I recommend you refer to the following blog to set the values of MaxMailboxDeliveryPerMdbConnections and RecipientThreadLimit.
Store Driver Fault Isolation Improvements in Exchange 2010 SP1
http://blogs.technet.com/b/exchange/archive/2011/04/11/store-driver-fault-isolation-improvements-in-exchange-2010-sp1.aspx
What's more, here is a thread for your reference.
4.3.2 432 STOREDRV.Deliver; recipient thread limit exceeded
http://social.technet.microsoft.com/Forums/exchange/en-US/3b097117-6eb7-4368-b45a-62a4cddf871b/432-432-storedrvdeliver-recipient-thread-limit-exceeded?forum=exchange2010
Hope it helps.
If there are any problems, please feel free to let me know.
Best regards,
Amy
Amy Wang
TechNet Community Support

Managing Distribution Groups with hidden membership (when hideDLMembership is true)

Similar Messages

Maybe you are looking for