Setup: I have a Windows Server 2008 SP 2 domain controller with three other similar domain controllers in Forest. Problem: I am trying to delegating Exchange 2007 Distribution List Management to End Users as outlined in the link -http://www.corelan.be/index.php/2009/05/21/delegating-exchange-2007-distribution-list-management-to-end-users/ When I apply the security changes to the distribution group in properties, the changes take and I can see the group "Distribution List Membership Editors" under security with the special permisions box checked. After about 10 or 15 minutes when I check the same distribution group the security settings that I have applied are now no where to be seen. My guess is that when AD is replicating amoung the other servers the security settings are getting lost. I am applying these changes on the Primary Domain Controller (PDC).

Check replication among DCs with replication monitor. Rgds Milos

Replication is fine. No problems reported with replication monitor.

Hi, What I could think is that maybe the group is protected by system, or there may be some group policy prevent that, I would like suggest you also refer to the below similar thread for more details: Windows 2003 folder permissions reverting back http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/ea1d6497-d558-4017-91e9-6568ff8a90a7 Regards, Yan LiYan Li TechNet Community Support