Hi, I have a question regarding the creation of distribution group in Exchange 2007. In my organization, I want to create a group for each department. Ex: one group for purchasing, one group for accounting,... As we already have groups created in active directory (Global group - security) for each department, I would like to use these group to avoid to key information at 2 differents places.. (When a new user is hiring, we will have to add his name in active directory (Global/Security) and add him in the departement group in exchange...) I know that if we want to enable an active directory group in exchange, it must be a universal group/distribution. What I thought is Icould create a universal group that contains the global/security group in Active Directory. From this point, I could just enable the universal group in exchange and I won't have to takecare to add the new employee in the exchange group.. But it seams that it doesn't works. Exchange let meenable the universal group but I am not able to send e-mail to this group. Otherwise, If I manually add employee to the exchange group, it works.. I don't know if you follow me... Thanks for your appreciated help!

Kdionne wrote: I know that if we want to enable an active directory group in exchange, it must be a universal group/distribution. This is incorrect. You can mail-enable security groups, just so long as they are not dynamic or as e2k3 called them: query-based. if you are not able to send mail to the new group, that may be a rights issue. by default new groups cannot accept mail from outside exchange. there is a checkbox on the group properties to enable anonymous senders, which you will need to enable. if you are not able to send to it from inside, it could be a recipient update service* delay, or possibly a permissions issue. check it out: How to Mail-Enable a Security Group http://technet.microsoft.com/en-us/library/bb123805.aspx * RUS delays shouldn't apply to e2k7 unless you are in a mixed envoriment.

I can mail-enable security group but it has to be a Universal Group... When you say to enbale the anonymous senders, is it under paramater tab (my version is in french)...? Also, I send e-mail from inside to inside account and it should not be a permission problem because I created the group with the admin account (Domain controler admin, member of exchange admin group). Perhaps I don't understand.. I am a french person who is learning english.. Is it possible that when we will install SP1, it will make a difference? Thanks for your help!

Yes, you can only mail-enable Universal groups in Exchange 2007. Here's you reference: http://technet.microsoft.com/en-us/library/bb124513.aspx However, although I've not personally tried, you can apparently mail-enable a Universal group in the Exchange 2007 Management Console but then conver it back to a Global group in ADUC and it still works. I'd advise against doing that though, since I presume Microsoft has made the above statements for a reason. The setting that Mike referenced can be found on the properties of a group in the Exchange General tab if I remember correctly. I think it's called "from authenticated users only" or similar - I don't have a server handy to check. You can also set this setting with the Exchange Management Shell via the Set-DistributionGroup cmdlet and the RequireSenderAuthenicationEnabled parameter.

Hi, It works... I can convert it back to a global group and everything is ok. Thanks for your help!!