Solved

Universal Groups Exchange 2010

Posted on 2014-02-06
2
319 Views
Last Modified: 2014-02-06
Hi experts,

I asked a similar question before, but I`d like to be sure before I do a fault.

In the past we created global security groups in our active directory which are used for NTFS-privileges on our network.

In Exchange2010 those groups are now shown as "Non-Universal E-Mail groups".

I need to convert some of them because of auto-responding functionality. Will the conversion break any NTFS-function?

Otherwise I would convert those groups.
We have a single domain and forest...


Best regards
Roland
0
Comment
Question by:Systemadministration
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 500 total points
ID: 39839069
You will not lose any NTFS functionality. I have talked about Mail Enabled Security Groups in the past and personally i do not like them. Although you can use them and they work perfectly fine, sometimes people get confused when you have a mix of Distribution and Mail Enabled Security Groups.

Example.
If you have a department "Accounting" with a mail enabled security group, and for whatever reason (projects normally) you would add someone from another department to this group so that they can get project updates, so you add someone from Marketing Department.

You have now done 2 things.
1. You have provided access to that user in the Martketing Department so they they can receive projects updates because they are part of the Accounting Mail Enabled Security Group.

2. You have also provided this user from the marketing department access to Shares or Directories that only Accounting should have access to. This now becomes a security concern because the user from Marketing may not know they have access to files or directories but if they stumble accross an Accounting direcotry they may see information which is probably confidential. I have seen this a lot and Security Audits will always fail if there was not a Change process in place and reasoning for this user to have access to these directories.

That being said everything will work fine. I just wanted to provide my opinion and experience when dealing with a mixture of distribution and mail enabled security groups.

Will.
0
 

Author Closing Comment

by:Systemadministration
ID: 39839098
Thanks!
Great Answer
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SMTP Receive connector logging 1 46
Spam Attack - Exchange 2010 14 48
Hybrid Exchange 6 29
Block Hacker? 2 38
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question