Hi AllWe are running Exchange 2003.I had a query I was hoping someone could help me with.What types of groups can be given rights on Exchange resources (e.g. a user's Calendar, a Public Folder etc)?Am I correct in thinking only mail enabled Security groups can be given rights? Or can Distribution Groups also be given rights if the access is set on the account level (i.e. logging into the account) rather than via ADUC/ESM.The reason I ask is that I have a request to give a Distribution Group access to a User's Calendar and I am not sure how to do this!Cheers

DL's cannot be used for any purpose that involves security, its simply a list of addresses.You must use security groups. Depending on where you want permission the group must be mail enabled, so the short answer is a mail enabled security group. Also try to use Universal groupslasse at humandata dot se, http://anewmessagehasarrived.blogspot.com

HiHmm....I tried to give a Distribution group Full Mailbox access to my mailbox using ADUC, and this doesn't work (as to be expected).However, if I go to Delegates, I can give delegate Calendar access to the Distribution Group.I was wondering if there was any explanation for this?Cheers!

Take a look at the DL that you used for delegation in outlook. It should now have been converted to a Security group by the store engine. You should also get info about this in the application log.lasse at humandata dot se, http://anewmessagehasarrived.blogspot.com

It hasn't converted the group from a Distribution group to a Security group, but what it has done is removed any permissions the group had on my Calendar...i.e, when I gave the group rights, it was assigned Reviewer for my Calendar and Tasks. When I checked this morning, the group permissions on these items was None.Does Exchange do this automatically since, as you say, you cannot assign security permissions to a DG? Have you seen this before?

Hi,As Lasse said, DG cannot be used for any purpose that involves security even though you can set the DG in the Delegates tab, it will result in the permissions on the items was None. That is because the DG doesn't have the SID.If the domain is a native-mode windows 2000 domain, it will convert to a Security Group from DG by the store engine when adding the DG for delegation as Lasse said.For your reference, please refer to the below article:http://support.microsoft.com/default.aspx/kb/274046ThanksAllen