| Author |
Message |
Linn Kubler
Guest
|
 Posted:
Sat Nov 12, 2005 9:50 pm Post subject:
security vs. distribution groups? |
|
|
Hi,
Just wondering when I setup a group, what's the difference between a
security group and a distribution group? I suspect that the intended
difference is that distribution groups are for Exchange emailing lists and
security groups are for setting access rights to documents and folders. But
what is the real difference to the network between them?
The reason I'm asking is that I have found two groups on my network that are
used as distribution lists but are set as security. When I clicked the
radio button to change it I received a warning that I'm changing access
rights. Which leads me to another question, how can I search for these
group names in the file system and find where they are assigned?
Thanks in advance,
Linn |
|
| Back to top |
|
 |
Linn Kubler
Guest
|
| Posted:
Sat Nov 12, 2005 9:50 pm Post subject:
Re: security vs. distribution groups? |
|
|
Ok, so how can I find out what permissions have been applied to a group, if
any?
Thanks,
Linn
"Paul Bergson" <pbergson@allete.com> wrote in message
news:Oek2Ta75FHA.444@TK2MSFTNGP11.phx.gbl...
| Quote: | In Forest Function level 2003 you can use security groups to send e-mail
to
but not the other way around. So if you change a group to distribution
that
was security you will lose any permissions applied to that group.
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no
rights.
"Linn Kubler" <lkubler@chartwellwisc2.com> wrote in message
news:%23o$4kQ75FHA.2192@TK2MSFTNGP14.phx.gbl...
Hi,
Just wondering when I setup a group, what's the difference between a
security group and a distribution group? I suspect that the intended
difference is that distribution groups are for Exchange emailing lists
and
security groups are for setting access rights to documents and folders.
But
what is the real difference to the network between them?
The reason I'm asking is that I have found two groups on my network that
are
used as distribution lists but are set as security. When I clicked the
radio button to change it I received a warning that I'm changing access
rights. Which leads me to another question, how can I search for these
group names in the file system and find where they are assigned?
Thanks in advance,
Linn
|
|
|
| Back to top |
|
|
Paul Bergson
Guest
|
| Posted:
Sat Nov 12, 2005 9:50 pm Post subject:
Re: security vs. distribution groups? |
|
|
In Forest Function level 2003 you can use security groups to send e-mail to
but not the other way around. So if you change a group to distribution that
was security you will lose any permissions applied to that group.
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Linn Kubler" <lkubler@chartwellwisc2.com> wrote in message
news:%23o$4kQ75FHA.2192@TK2MSFTNGP14.phx.gbl...
| Quote: | Hi,
Just wondering when I setup a group, what's the difference between a
security group and a distribution group? I suspect that the intended
difference is that distribution groups are for Exchange emailing lists and
security groups are for setting access rights to documents and folders.
But
what is the real difference to the network between them?
The reason I'm asking is that I have found two groups on my network that
are
used as distribution lists but are set as security. When I clicked the
radio button to change it I received a warning that I'm changing access
rights. Which leads me to another question, how can I search for these
group names in the file system and find where they are assigned?
Thanks in advance,
Linn
|
|
|
| Back to top |
|
|
Paul Bergson
Guest
|
| Posted:
Sun Nov 13, 2005 1:50 am Post subject:
Re: security vs. distribution groups? |
|
|
You could try a tool Microsoft has supplied but I believe ther are better
out there.
http://support.microsoft.com/default.aspx?scid=kb;en-us;320046
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Linn Kubler" <lkubler@chartwellwisc2.com> wrote in message
news:umgJfJ85FHA.2888@tk2msftngp13.phx.gbl...
| Quote: | Ok, so how can I find out what permissions have been applied to a group,
if
any?
Thanks,
Linn
"Paul Bergson" <pbergson@allete.com> wrote in message
news:Oek2Ta75FHA.444@TK2MSFTNGP11.phx.gbl...
In Forest Function level 2003 you can use security groups to send e-mail
to
but not the other way around. So if you change a group to distribution
that
was security you will lose any permissions applied to that group.
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no
rights.
"Linn Kubler" <lkubler@chartwellwisc2.com> wrote in message
news:%23o$4kQ75FHA.2192@TK2MSFTNGP14.phx.gbl...
Hi,
Just wondering when I setup a group, what's the difference between a
security group and a distribution group? I suspect that the intended
difference is that distribution groups are for Exchange emailing lists
and
security groups are for setting access rights to documents and folders.
But
what is the real difference to the network between them?
The reason I'm asking is that I have found two groups on my network
that
are
used as distribution lists but are set as security. When I clicked the
radio button to change it I received a warning that I'm changing access
rights. Which leads me to another question, how can I search for these
group names in the file system and find where they are assigned?
Thanks in advance,
Linn
|
|
|
| Back to top |
|
|
Joe Richards [MVP]
Guest
|
| Posted:
Sun Nov 13, 2005 9:50 pm Post subject:
Re: security vs. distribution groups? |
|
|
The difference between a security-enabled group and a non-security enabled group
is that a security enabled group will be present in the kerberos cert and
authentication tokens for a user when they logon. This is used for the Windows
NT security model.
The security-enabled aspect of a group doesn't impact whether or not it can be
used for mail distribution purposes. You can send messages to a group whether it
is security enabled or not, again the difference is what goes into the
authorization token.
When someone in Exchange takes a non-security enabled group and applies that
group to some role in Exchange (say has access to a mailbox or folder) Exchange
automatically security enables that group. The one exception is Universal groups
in a non-native domain. In a non-native domain, you can't have security enabled
universal groups however if someone used DLGs or Global groups, those would be
security enabled as needed by Exchange.
joe
--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Linn Kubler wrote:
| Quote: | Hi,
Just wondering when I setup a group, what's the difference between a
security group and a distribution group? I suspect that the intended
difference is that distribution groups are for Exchange emailing lists and
security groups are for setting access rights to documents and folders. But
what is the real difference to the network between them?
The reason I'm asking is that I have found two groups on my network that are
used as distribution lists but are set as security. When I clicked the
radio button to change it I received a warning that I'm changing access
rights. Which leads me to another question, how can I search for these
group names in the file system and find where they are assigned?
Thanks in advance,
Linn
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in