Hello I am a member of 'Organization Management' in our Exchange 2010 SP1 environment (all servers running Exchange 2010 SP1). Trying to modify the 'Managed by' property of any distribution list via the Exchange Management Console fails with the following error: -------------------------------------------------------- Microsoft Exchange Error -------------------------------------------------------- The following error(s) occurred while saving changes: Set-DistributionGroup Failed Error: You don't have sufficient permissions. This operation can only be performed by a manager of the group. Performing the same change via Set-DistributionGroup GroupName -ManagedBy ManagerName -BypassSecurityGroupManagerCheck in the Exchange Management Shell works fine. It looks like the EMC doesn't add the -BypassSecurityGroupManagerCheck switch parameter to the generated command. According to http://support.microsoft.com/kb/976591/ this was a known issue and should have been fixed in SP1, however, it appears it's not. How can I fix this and make the EMC generate the proper PowerShell command? Note: This is not a permissions issue as I am a member of 'Organization Management' and I can execute the command successfully in the shell. Thanks Olli

Hi If it's a known bug, give a call to PSS and have them verify that it was solved in SP1 Or else maybe they have some hotfix for it you can get Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog: http://www.testlabs.se/blog

Hi Olli, I also test it in my lab. You will only meet the error if you create a Security Group using ADUC, then enable it in EMC. And if you create a Distribution Group using ADUC and enable it in EMC, you can modify the "Managed by" successfully. And if you just create the DG or SG in EMC directly, you can also modify the "Manage by". You can also find out the admin is already listed in the "Managed By". The workaround: You can add the member of "Organization Management" to "Managed By" of SG's property using ADUC.Frank Wang

Hi Frank Thanks for your reply. We are currently migrating from Exchange 2003 to Exchange 2010. Most of our email-enabled groups are security groups that were created using ADUnC a long time before the migration started. Is there a way to fix them retrospectively so that our admins can use the EMC to modify the 'Managed By' attribute? Or is there a way to make EMC add the -BypassSecurityGroupManagerCheck switch parameter to the Set-DistributionGroup -ManagedBy cmdlet by default? Regards Olli

Is this going to be fixed? because in exchange 2010 sp1 ro2 it still isn't :( Do the groups have to be upgraded to the new exchange 2010 to understand new attributes? If I change the group to distribution group (in AD) than i'm able to set the "Managed by" (in EMC), and then I can change it back to securtiy group (in AD). But if the group is a security group I get a access denied when change something in EMC.

Fix is listed in RU3Lead Systems Administrator

At my Exchage 2010 Installation with last RU, this bug is already present

I have a client with RU3-V3 and they are still having this issue.