We help IT Professionals succeed at work.

can a univeral distribution group have a global security group as a member and the members of the Global group receive email?

144 Views
Last Modified: 2018-09-10
I have a universal email distribution group and a Global security group with an email address assigned to it has been added to it. I am not sure if it was always a security group or if someone converted it. Anyway, individual users added to the universal group are getting emails but the members of the Global group are not. I just cannot recall the basic rules. Can a Global group even belong to a Universal group? That could be my problem right there....btw we at using Exchange 2016 with active directory 2012
Comment
Watch Question

CERTIFIED EXPERT

Commented:
I believe that at least for security groups the setup that is recommended is:

Accounts get assigned to global groups, global groups get assigned to universal groups and universal groups get assigned to domain local groups.  

If that helps at all.

I must note this is security groups.  I don't recall distribution groups.
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
Did you mail-enable the security group?
timgreen7077Exchange Engineer
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
Make sure that the security group is mail-enabled. If its not you can run the below

Enable-DistributionGroup -Identity "group name"

Author

Commented:
The first distribution group shows "Mail Universal Distribution Group" and all users that are individually added receive emails. There is a distribution group under it that also shows as "Mail Universal Distribution Group" under Exchange 2010 Recipient Type Details, but none of the second groups members receive email when the top group is emailed. There is also a Global Group that displays as "Mail NON-Universal Group" in Exchange 2010 and members of that group do not receive emails sent to the top group. I am assuming the way all the groups are listed under Recipient Type Details means they are all mail enabled. Very strange.
timgreen7077Exchange Engineer
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
If you have nested groups you need to be sure that the sender is allowed to send to the nested group along with the parent group. If they can send to the parent DL, but there is also a nested DL, they will also need to be allowed to send to that one also.

Author

Commented:
I was thinking along those lines too. All I can see is that both the top and sub Universal groups require sender to be "authenticated" but it is not limited to specific users. Please see attachment
authentication.PNG
Exchange Engineer
CERTIFIED EXPERT
Distinguished Expert 2018
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
timgreen7077Exchange Engineer
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
author is the comments on this ticket was helpful, please assign points and close ticket.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions