Problem with security groups on exchange

Posted on 2004-03-26
Last Modified: 2013-12-04
Hi all,
I have a problem with our AD forest. We have one top domain called something.local
and 2 child domains called domain1.something.local and domain2.something.local

The exchange 2000 server is running in the top domain, native mode, and the whole forest is running in native mode.
The thing is that we have several mailboxes that a number of users should be able to access in outlook.
When i add the users to mailbox rights everything works fine, but when i add a security group to the mailbox rights containing the users that should have access to the mailbox, they cant open it in outlook. I have tried with domain local/global and universal groups but nothing works. I also have run netdiag and other tools but they cant find any problems with the AD.

Suggestions anyone?
I would have put more points into this if I had =)

Question by:mcsallad
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
LVL 12

Expert Comment

ID: 10685839
Add each user separately

Many Regards
Jorgen Malmgren

:o) Your brain is like a parachute. It works best when it's open

Author Comment

ID: 10685843
Yes, I have done that, but since we have a lot of shared mailboxex and a LOT of users that is too time consuming, why doesnt it work with groups?

Expert Comment

ID: 10686912
Have you tried distribution groups as opposed to security groups, security groups have ACL's associated with them, which in this case it doesn't sound like you need.  Distribution groups are to organise other groups and users and should solve your problem.
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.


Author Comment

ID: 10711774
Well, that doesnt work, I can tell you without even trying, you cant give mailbox rights to a distribution group...
Distribution groups are precisely what they sound like, distribution groups nothing else

Author Comment

ID: 10811732
Hum, when I create the groups in the top domain everything works fine, but not when I create them in the subdomains..

Author Comment

ID: 10811733
Hum, when I create the groups in the top domain everything works fine, but not when I create them in the subdomains..
LVL 12

Accepted Solution

trywaredk earned 25 total points
ID: 10817677
Delegated Permissions Are Not Available and Inheritance Is Automatically Disabled

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit If you want to manage em…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question