I have searched the web and can't find any solution. Everything points to a hotfix in Exchange 2003 SP2 but I am already running SP2. Even simply changing the Display Name on that page gives the same error. In Active Directory I create a Query-Based Distribution Group and add the members. When I edit the properties of the group and go to the "Exchange General" tab and try and set message restrictions so that only two users can send to the list it comes up with this message: Access denied. Facility: LDAP Provider ID no: 8007005 Microsoft Active Directory - Exchange Extension Any ideas?

This likely to sound blindingly obvious, but have you checked the security descriptor on the Query-Based Distribution Group object to see whether the account you are using has permissions to modify it? The AD object class is msExchDynamicDistributionList, rather than group, so depending on your delegation model, you may not have the required permisssions. Tony www.activedir.org