In Active Directory I create a Query-Based Distribution Group and add the members. When I edit the properties of the group and go to the "Exchange General" tab and try and set message restrictions so that only two users can send to the list it comes up with this message: Access denied. Facility: LDAP Provider ID no: 8007005 Microsoft Active Directory - Exchange Extension Even simply changing the Display Name on that page gives the same error. I have searched the web and can't find any solution. Everything points to a hotfix in Exchange 2003 SP2 but I am already running SP2. Any ideas?

If you turn on advanced features from the 'view menu' in ADUC, that will add the security tab. Check it and make sure you don't have any wierd denies or lack of access to that object.