Hi, We have shared mailboxes in Exchange server 2003. We have some domain local security groups which in turn contains global groups which are given mailbox read and full access on these shared mailboxes. If we move these mailboxes to another domain, will all members of these gorups still be able to access those mailboxes? Or do we need to convert any of these groups into Universal security groups? Regards JayasimhaJayasimha Puppala

On Thu, 28 Oct 2010 06:15:40 +0000, Jayasimha wrote: >We have shared mailboxes in Exchange server 2003. We have some domain local security groups which in turn contains global groups which are given mailbox read and full access on these shared mailboxes. If we move these mailboxes to another domain, will all members of these gorups still be able to access those mailboxes? Or do we need to convert any of these groups into Universal security groups? Universal groups are the way to go (if you can). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Thanks for your reply. But which groups should we convert? Domain Local to Universal or Global groups to Universal groups? What would be the impact on access if we simply move those mailboxes to another domain without converting them?Jayasimha Puppala

On Fri, 29 Oct 2010 01:48:26 +0000, Jayasimha wrote: >But which groups should we convert? Domain Local to Universal or Global groups to Universal groups? What would be the impact on access if we simply move those mailboxes to another domain without converting them? If you're working in a multi-domain organization, using Universal groups is much better. If you can't, then create a global group in each domain and populate it with the global groups from each of the domains (use the "Exchange Enterprise Servers" and "Exchange Domain Servers" groups as an example). Unless you're using some earlier version of BizTalk, why are you using domain local groups at all? --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP