Hi all I'm working on Delegation of certain tasks in AD for "contacts" and "groups", so called Email-enabled contacts and distribution groups. I read alot of articles on the web and did some testings on a development domain, after some more reading I got it working. The main problem was some security changes taking place on SP1 for windows 2003 ending up with not working access to, among other things the Service "Exchange System Attendant" which is required to set up the SMTP email address. I found the solution in an article from MS, by changing the settings with command "SC SDSET SCMANAGER" on the Exchange server and applying the string: D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPRC;;;IU)(A;;CCLCRPRC;;;SU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD) I got it working. I did save the original String prior to the command above and my testing environment is pretty much "out of the box". I noticed that the difference was in the very first section, "D:(A;;CC;;;AU)" changes to "D:(A;;CCLCRPRC;;;AU)" the rest of the string was identical. Now, to my problem; when starting to work on my live environment, after getting the test-env to work successfully. I discovered that the Security string on the live Exchange server was not the same as my original, In major parts its identical, but just before the end there is 2 sections inserted carrying refs to SID of type S-1-5-21-xxxx..., so i assumed this server already had been modified for some other reasons or needs. Now, my question; would it be correct to assume that if I take the "current" string and just modify the very first section to the version that got my testing env. to work it will make my live environment to work also? After all; that section of the current string has the same string as the testing environment string had from the beginning, So i assume that's the part I need to modify, and in order not to undo what has already been applied I should use the rest of the "current" string so all those parts will remain unchanged, right? Am I totally wrong? or should that approach work? Rgds, Kjell

hi again Is there anything I can add to make this problem/question easier to understand? This is the article from MS describing the problem and the solution. http://support.microsoft.com/kb/905809 I wish it would mention what to do if the string already has been modified away from original. Kjell