Article ID: 2467619 - Last Review: July 28, 2011 - Revision: 3.0

A user who manages a distribution group cannot remove another user whose mailbox is disabled in an Exchange Server 2010 environment

View products that this article applies to.
System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You create a distribution group in a Microsoft Exchange Server 2010 environment.
  • You add a user whose mailbox is disabled into the distribution group.
  • You make another user the manager of the distribution group.
  • You assign the MyDistributionGroups role to the manager user account.
  • You log on to Office Outlook 2007 or Outlook 2010 by using the manager user account.
  • You try to remove the user account that has the mailbox disabled from the distribution group.


In this scenario, you cannot remove the user account. Additionally, you receive the following error message:

Changes to the distribution list membership cannot be saved. You do not have sufficient permission to perform this operation on this object.

Note You can run the New-ManagementRoleAssignment cmdlet to assign a management role to a user account.
Back to the top

CAUSE

This issue occurs because the MyDistributionGroups role configures the read scope to MyGAL. If the mailbox of a user account is disabled, the user account does not belong to the list. The Address Book Service cannot find the user account when it tries to delete the user account that belongs to MyGAL. Therefore, the user account cannot be removed.
Back to the top

RESOLUTION

To resolve this issue, install the following update rollup:
2579150  (http://support.microsoft.com/kb/2579150/ ) Description of Update Rollup 4 for Exchange Server 2010 Service Pack 1
Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top

WORKAROUND

To work around the issue, perform one of the following steps:
  1. Remove the user account that has the mailbox disabled by using theExchange Control Panel (ECP).
  2. Follow the Resolution section that is mentioned in KB article 982349. However, the solution grants the user account permission to manage all distribution groups instead of the groups that are owned by the user account.
Back to the top

MORE INFORMATION

For more information about the MyDistributionGroups role, visit the following TechNet website:

General information about the MydistrbutionGroups role (http://technet.microsoft.com/library/dd876849.aspx)

For more information about the New-ManagementRoleAssignment cmdlet, visit the following TechNet website:

General information about the New-ManagementRoleAssignment cmdlet (http://technet.microsoft.com/library/dd335193.aspx)

For more information about workaround of this issue, click the following article number to view the article in the Microsoft Knowledge Base:
982349  (http://support.microsoft.com/kb/982349/ ) "Changes to the distribution list membership cannot be saved" error message when you try to remove members from an Exchange Server 2010 distribution list
Back to the top
APPLIES TO
  • Microsoft Exchange Server 2010 Service Pack 1, when used with:
    • Microsoft Exchange Server 2010 Enterprise
    • Microsoft Exchange Server 2010 Standard
Back to the top
Keywords: 
kbfix kbexpertiseinter kbsurveynew kbqfe kbhotfixrollup KB2467619
Back to the top