Insufficient rights when adding a manager to a group via powershell
When running set-Group -Identity "account operators" -ManagedBy "userfirst userlast" I get the error: You don't have sufficient permissions. This operation can only be performed by a manager of the group. + CategoryInfo : InvalidData: (:) [Set-Group], OperationRequiresGroupManagerException + FullyQualifiedErrorId : 992956D5,Microsoft.Exchange.Management.RecipientTasks.SetGroup When I add the -BypassSecurityGroupManagerCheck to the above command I get: Active Directory operation failed on domain.com. This error is not retriable. Additional information: Insuffic ient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 + CategoryInfo : NotSpecified: (0:Int32) [Set-Group], ADOperationException + FullyQualifiedErrorId : F2BDAE9E,Microsoft.Exchange.Management.RecipientTasks.SetGroup I AM a member of the Organization Management group. I need to change about 200 groups to have the same manager, I would rather not have to do it in the GUI :)
September 1st, 2010 12:42am

Have you tried on a group other than "account operators' ?
Free Windows Admin Tool Kit Click here and download it now
September 1st, 2010 3:22am

I thought I had but I tried another group and it worked fine. Let me run a script and see which ones aren't updated and maybe we can determine why.
September 1st, 2010 8:17pm

There were several groups that failed, Account operators was one of them. However, the majority of them worked just fine. Thanks for the troubleshooting tip!
Free Windows Admin Tool Kit Click here and download it now
September 1st, 2010 8:51pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics