Insufficient rights when adding a manager to a group via powershell
When running set-Group -Identity "account operators" -ManagedBy "userfirst userlast"
I get the error:
You don't have sufficient permissions. This operation can only be performed by a manager of the group.
+ CategoryInfo : InvalidData: (:) [Set-Group], OperationRequiresGroupManagerException
+ FullyQualifiedErrorId : 992956D5,Microsoft.Exchange.Management.RecipientTasks.SetGroup
When I add the -BypassSecurityGroupManagerCheck to the above command I get:
Active Directory operation failed on domain.com. This error is not retriable. Additional information: Insuffic
ient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
+ CategoryInfo : NotSpecified: (0:Int32) [Set-Group], ADOperationException
+ FullyQualifiedErrorId : F2BDAE9E,Microsoft.Exchange.Management.RecipientTasks.SetGroup
I AM a member of the Organization Management group. I need to change about 200 groups to have the same manager, I would rather not have to do it in the GUI :)
September 1st, 2010 12:42am
Have you tried on a group other than "account operators' ?
Free Windows Admin Tool Kit Click here and download it now
September 1st, 2010 3:22am
I thought I had but I tried another group and it worked fine. Let me run a script and see which ones aren't updated and maybe we can determine why.
September 1st, 2010 8:17pm
There were several groups that failed, Account operators was one of them. However, the majority of them worked just fine. Thanks for the troubleshooting tip!
Free Windows Admin Tool Kit Click here and download it now
September 1st, 2010 8:51pm