Outlook 2003 - delegating calendar access to entire company using AD group - cannot get to work.
Management had requested that everyone in company be able to see everyone else's calendar.
This has been achieved by previous staff by using delegate of EVERY user and granting access individually to every other company staff member.
So if you look at the delegates list for one user, they have every other company user listed there
As you can imagine this makes for a management headache.
On learning this I thought, surely rather then add each company member to the delegate list why don't you just add a group (e.g. ALL-IN-COMPANY)
However when I done an experiment I could not actually get this to work. Therefore I took my user in AD, removed all the individual delegates that had been granted permission to my calendar and added the group "ALL-IN-COMPANY".
However when ever I added this and then went back to it, I found the permission for calendar had been set back to "none"
I checked out the group "ALL-IN-COMPANY" in AD and I see that it is a "Distribution Group - Global"
My question is why can't a grant the group "All-IN-COMPANY" permission to view / edit my calendar?
Do I have to do something special to the group or does this indicate a problem?
Thanks for any input.
This has been achieved by previous staff by using delegate of EVERY user and granting access individually to every other company staff member.
So if you look at the delegates list for one user, they have every other company user listed there
As you can imagine this makes for a management headache.
On learning this I thought, surely rather then add each company member to the delegate list why don't you just add a group (e.g. ALL-IN-COMPANY)
However when I done an experiment I could not actually get this to work. Therefore I took my user in AD, removed all the individual delegates that had been granted permission to my calendar and added the group "ALL-IN-COMPANY".
However when ever I added this and then went back to it, I found the permission for calendar had been set back to "none"
I checked out the group "ALL-IN-COMPANY" in AD and I see that it is a "Distribution Group - Global"
My question is why can't a grant the group "All-IN-COMPANY" permission to view / edit my calendar?
Do I have to do something special to the group or does this indicate a problem?
Thanks for any input.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Also in going into AD the option to change it into a Security group is greyed out. What could that mean?
I did not originally setup this server.
I did not originally setup this server.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
What version of Exchange is this?
What mode is your Windows domain in, and what mode is the Exchange org in?
Simon.
What mode is your Windows domain in, and what mode is the Exchange org in?
Simon.
ASKER
Exchange 2003, Server 2003.
Not sure what mode domain is in? How do I know. Also not sure what mode Exchange org is. Again how can I tell?
Thanks!!
Not sure what mode domain is in? How do I know. Also not sure what mode Exchange org is. Again how can I tell?
Thanks!!
if a distribution group containes one or more contacts - it can't be converted into security group.
Try creating a new security group and assign permissions to this group.
Try creating a new security group and assign permissions to this group.
Right click on the Exchange org at the top of the tree and choose Properties. That will tell you the mode of Exchange.
For the domain, similar thing but in ADUC.
Simon.
For the domain, similar thing but in ADUC.
Simon.
ASKER
Exchage mode:
Mixed Mode (can support pre-Exchange 2000 Servers)
Not sure why actually as we only have one exchange server - perhaps they did migrate to this however.
Not sure I found the right place for the Windows Server but maybe
"Windows 2000 mixed" would be what your after.
would this explain why when thye log onto the domain from a PC it shows the short version of the domain name.
Another topic so no advanced answer needed but would performance benefit from moving over to an 03 mode only - or more effort then it's worth?
Mixed Mode (can support pre-Exchange 2000 Servers)
Not sure why actually as we only have one exchange server - perhaps they did migrate to this however.
Not sure I found the right place for the Windows Server but maybe
"Windows 2000 mixed" would be what your after.
would this explain why when thye log onto the domain from a PC it shows the short version of the domain name.
Another topic so no advanced answer needed but would performance benefit from moving over to an 03 mode only - or more effort then it's worth?
ASKER
Another thing.
Is it possible that if the company moved from having a big list of delegates listed (one for each member of staff) in everyones delegate list. To having eeryone just delegate access to a sinlge security group, performance could be improved in any way?
Is it possible that if the company moved from having a big list of delegates listed (one for each member of staff) in everyones delegate list. To having eeryone just delegate access to a sinlge security group, performance could be improved in any way?
ASKER
One final related question. How comes some of the existing security groups have a row of exchange related tab options and other do not.
How does one define the difference when setting up a security group?
Only the ones with the exchange tab seem to show up in the list of available delegates.
How does one define the difference when setting up a security group?
Only the ones with the exchange tab seem to show up in the list of available delegates.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Ok all good stuff.
Rearding:
"Are you sure that it is delegates that you want to set, and not just permissions on the Calendar folder so that everyone can see the contents? If it is just permissions to view, then grant the permission to your "All Staff" security group equivalent."
No I'm not sure. They way it is currenlty acheived is
Tools-> Options-> Delegates (Tab)
Thn adding the user to the list and setting it so they have rights to view, edit and etc.
I think the way you have suggested (which I am not familar with anyway) just gives permission to view, right?
Thanks.
Rearding:
"Are you sure that it is delegates that you want to set, and not just permissions on the Calendar folder so that everyone can see the contents? If it is just permissions to view, then grant the permission to your "All Staff" security group equivalent."
No I'm not sure. They way it is currenlty acheived is
Tools-> Options-> Delegates (Tab)
Thn adding the user to the list and setting it so they have rights to view, edit and etc.
I think the way you have suggested (which I am not familar with anyway) just gives permission to view, right?
Thanks.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Great input. Security group now created and seems to do the trick.
ASKER