Exch. 2010 SP1 - Attempting to remove user from Universal Security Group - Error
I'm trying to remove some users from two of our Universal Security Groups on our Exchange 2010 SP1 setup
However whenever I click "apply" after removing the user I get the following error message:
You don't have sufficient permissions. This operation can only be performed by a manager of a group.
I am attempting to do this having logged onto the Exchange server as the Domain admin.
I've searched this error via Google and other forums and there appears to be a few references out there.
However none of the fixes I'm reading seem to work.
Can anyone please give some step-by-step instructions on how to fix this issue?
We need to be able to remove users from security groups.
Thanks.
November 5th, 2010 10:55am
Which universal security groups are you referring to?
This is really an AD issue, not an Exchange one.
Free Windows Admin Tool Kit Click here and download it now
November 5th, 2010 11:21am
On our Exchange setup we have numerous "Universal Security Groups" that were created under first our initial Exchange 2000 setup and were migrated over to our Exchange 2003 setup - they now exist under our Exchange 2010 setup.
These all appear under our "Distribution Group" under "Recepient Configuration".
Basically they are a mail enabled Security Group.
If we try and remove people from these distribution groups we get the error message as above.
I've been into AD and manually added "domain\administrator" as the owner of the group.
However I still get the same message when I try to do anything in the EMC.
November 5th, 2010 12:21pm
Do you get the same error message if you try to remove the members with ADUC?
Ensure there are no denies and the account you are using has full access via the security tab.
ALso, see:
http://social.technet.microsoft.com/Forums/en/exchange2010/thread/a587a97d-0d22-4540-aff0-5728b06e287c and
http://social.technet.microsoft.com/Forums/en/exchangesvrgeneral/thread/aee4c00c-0e0f-4a44-8be1-cbc37feaf038
Being a domain admin doesnt necessarily mean you have the RBAC perms to do what you want via the Exchange Mgmt Tools.
Free Windows Admin Tool Kit Click here and download it now
November 5th, 2010 1:02pm