• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 331
  • Last Modified:

Universal Groups Exchange 2010

Hi experts,

I asked a similar question before, but I`d like to be sure before I do a fault.

In the past we created global security groups in our active directory which are used for NTFS-privileges on our network.

In Exchange2010 those groups are now shown as "Non-Universal E-Mail groups".

I need to convert some of them because of auto-responding functionality. Will the conversion break any NTFS-function?

Otherwise I would convert those groups.
We have a single domain and forest...


Best regards
Roland
0
Systemadministration
Asked:
Systemadministration
1 Solution
 
Will SzymkowskiSenior Solution ArchitectCommented:
You will not lose any NTFS functionality. I have talked about Mail Enabled Security Groups in the past and personally i do not like them. Although you can use them and they work perfectly fine, sometimes people get confused when you have a mix of Distribution and Mail Enabled Security Groups.

Example.
If you have a department "Accounting" with a mail enabled security group, and for whatever reason (projects normally) you would add someone from another department to this group so that they can get project updates, so you add someone from Marketing Department.

You have now done 2 things.
1. You have provided access to that user in the Martketing Department so they they can receive projects updates because they are part of the Accounting Mail Enabled Security Group.

2. You have also provided this user from the marketing department access to Shares or Directories that only Accounting should have access to. This now becomes a security concern because the user from Marketing may not know they have access to files or directories but if they stumble accross an Accounting direcotry they may see information which is probably confidential. I have seen this a lot and Security Audits will always fail if there was not a Change process in place and reasoning for this user to have access to these directories.

That being said everything will work fine. I just wanted to provide my opinion and experience when dealing with a mixture of distribution and mail enabled security groups.

Will.
0
 
SystemadministrationAuthor Commented:
Thanks!
Great Answer
0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now