Deleting obsolete security groups

mrosier
mrosier used Ask the Experts™
on
Hello! I have old security groups in Exchange 2016 on-premise that have existed from previous version of Exchange. I want to delete them. However I get this error when I try and cannot find a solution anywhere:

error
Property IsExecutingUserGroupOwner can't be set on this object because it requires the object to have version 0.10 (14.0.100.0) or later. The object's current version is 0.0 (6.5.6500.0).

Any advice?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Server engineer
Commented:
You are managing old security groups which were not created from  Exchange 2016 on-premise server, hence you are getting error . So first you need to upgrade them and then remove.


This would upgrade all Distribution Groups:
Get-DistributionGroup | Set-DistributionGroup -ForceUpgrade

...but you can of course also upgrade the groups one by one
Set-DistributionGroup "Group Name" -ForceUpgrade

Then Remove

Remove-DistributionGroup -Identity "Temporary Staff" -BypassSecurityGroupManagerCheck

Author

Commented:
Oh ok, I saw that online and thought that because these were security groups that command wouldn't work, but it indeed did work. Is there any risk to running the former that upgrades them all at once?
Saif ShaikhServer engineer

Commented:
No risk as per the error:

Property IsExecutingUserGroupOwner can't be set on this object because it requires the object to have version 0.10 (14.0.100.0) or later. The object's current version is 0.0 (6.5.6500.0).

You see the error closely that the above security groups were created with version 0.0 (6.5.6500.0) which is exchange 2003 I M DAM SURE.

And when you are managing it from a higher version as per error i.e. "0.10 (14.0.100.0)" i.e. exchange 2016 it gives the error.

SO yes no risk...

Try to upgrade 1 first, then try to remove it using the  -BypassSecurityGroupManagerCheck I posted above.

If it works upgrade all and then delete them...
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
Hey Saif, I am getting the resulting error for a couple of groups:

Property expression "xxxxx" isn't valid. Valid values are: Strings formed with characters from A to Z (uppercase or lowercase), digits from 0 to 9, !, #, $, %, &, ', *, +, -, /, =, ?, ^, _, `, {, |, } or ~. One or more periods may be embedded in an alias, but each period should be preceded and followed by at least one of the other characters. Unicode characters from U+00A1 to U+00FF are also valid in an alias, but they will be mapped to a best-fit US-ASCII string in the e-mail address, which is generated from such an alias.
Saif ShaikhServer engineer
Commented:
For those couple of groups there is a "space" in their aliases.

Please remove space from their aliases manually and see if that works.

This can also happen if:

This is caused because for that particular user there is no entry in the “domain” attribute on the user object. In our case "security groups".

1. Log onto a domain controller.

2. Start > Administrative tools> Active Directory Users and Computers.

3. Locate the user > Right click > Properties > Account Tab.

4. Put the domain name in the domain section. (use the drop down).

Author

Commented:
That did it actually, I removed spaces in aliases (after I saw where the aliases are set in the EAC), and I could convert and delete. Thanks!

Author

Commented:
Saif gave me great instruction on this one and I am set!
Saif ShaikhServer engineer

Commented:
Glad to Help..

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial