RE: [ActiveDir] Univ group problem

[Ken Cornetet]

Title: Message

It's a bug^h^h^h feature of the way Outlook talks to Active Directory. Here's the somewhat simplified story:   Global Catalog (GC) servers are what Outlook talks to for working with distribution lists, which now are universal groups in AD. Since GCs are also DCs, they have read/write access to the groups in their own domain. However, they have *read only* copies of groups from the other domains in the forest.   Therefore, an outlook user can only update group membership for groups that are in the same domain as the GC that outlook is connected to, which, most of the time, is going to be a GC in the user's domain.   Joe, another member of this list, has been beating on MS about this issue for quite a while. If memory serves, he recently got them to classify this as a bug. Unfortunately the fix will have to wait for some future version of Exchange or Outlook.   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Tuesday, December 23, 2003 3:56 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Univ group problem Hello, to those who haven’t disappeared for the holidays!   We’re having a problem with a Universal Group. Both domains are native, and therefore the DL is a Universal group, Security type. The Univ group exists in Domain A. The purpose of this group is to control who can go into Address Book and modify members of a particular distribution list   Users from both Domain A and Domain B are in this UG. Users from Domain A are able to modify the distribution list membership, but those from Domain B are not. The OK button is grayed out, indicating they don’t have the permission. Any suggestions?   Thanks!   Mark Creamer