• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 845
  • Last Modified:

Distribution list using security group?

I'm using Exchange 2003 and Windows 2003. If I create a distribution list and add a security group as a member will should that work? I'm just trying to get away from adding individual users into distribution groups. Example security group "sales department" contains all of the people in the sales department. Why not just add it to distribution group "sales".
0
vbplayer
Asked:
vbplayer
  • 3
  • 3
  • 2
  • +1
3 Solutions
 
amacdonaldCommented:
Yes you can add Security Groups to your distribution group.  If you are just going to have the secuirty group as the only member of the Distribution group, you could instead just Mail-Enable the secuirty group and it will act as both the Distribution Group and Security Group.
0
 
Rant32Commented:
Good idea. Just make sure the security group has the Universal scope when you mail-enable it, or group membership will not replicate to the global catalog.

For strange effects of that, see
http://www.experts-exchange.com/Networking/Email_Groupware/Exchange_Server/Q_21821129.html
0
 
SembeeCommented:
In native mode domain I create all groups as mail enabled security groups - I very rarely will create distribution groups. By using a security group I can use the same group for both email and permissions - which simplifies the administration of the domain somewhat.

Simon.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
Rant32Commented:
Yes.

The only reason, I guess, to separate Security groups and Distribution group is for, well, security. When one administrator maintains distribution lists, and another administrator is responsible for security and access control.

We're talking Medium Business here - at least 2000 seats ;-)
0
 
SembeeCommented:
rant32 - With those sorts of numbers I tend to spend a maximum of about two weeks with the client (deploy Exchange then that is my job done), so don't need to worry about making things easy to manage.
I was talking about smaller sites - which is what most of the users on this site are.

Simon.
0
 
vbplayerAuthor Commented:
Thanks for the advice.

I’ve mail enabled my security groups. I’m assuming all I needed to was add in an email address to my existing groups. I then added them to my distribution groups.

Sometimes it works, sometimes it doesn’t. Which was why originally posted my question. Never have I been able to send mail to my “domain users” group. Which I added to a distribution group.

I’ve tried setting the security and distribution groups to universal and still sporadic at best. I thought this was going to be an easy one. Huh…lol.
0
 
SembeeCommented:
Mail enabling is a process. You need to do it on the Exchange server itself, or another copy of ADUC with the Exchange tabs.
Right click on the group and choose Exchange tasks. Step through the wizard to establish an address.

Some groups cannot be mail enabled - "Everyone", Domain Admins, Domain users are some. They are special groups.

Simon.
0
 
Rant32Commented:
If you want a group that allows "mail to all" then create a query-based distribution group. QBDC allows you to do a lot of fun/useful stuff - group membership based on OU, mail-enabled groups, public folders, or any custom LDAP query.
0
 
vbplayerAuthor Commented:
Thanks for all the information. I decided just to add the individual security groups into the ALL distribution group.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now