"Do not have sufficient permissions" error message occurs when you use Outlook Address Book to manage distribution list membership

When you use Microsoft Outlook to modify distribution list (DL) membership, you may receive the following error message:

This behavior can occur if you have a user group in one Active Directory domain and a distribution group in another domain. Each domain has its own global catalog. When a user tries to manage DL membership by using Microsoft Outlook Address Book, the user who has the permission to manage the DL receives the "do not have sufficient permissions" error message.

A global catalog contains a subset of all objects in the forest; it is only writable for the objects from its own domain. All Outlook requests are processed on the global catalog server of the user's domain. A user can only manage distribution groups that are in the user's domain, because the user's global catalog has a read-only copy of other objects.

To resolve this behavior, you can use the AutoDL tool to manage DLs. This tool is located on the Exchange 2000 Resource Kit CD-ROM. Alternatively, you can assign the DL and user group in the same domain.

The following message is the full text of of the error message that is described in the "Symptoms" section of this article: For more information about DL membership, click the following article number to view the article in the Microsoft Knowledge Base: For more information about AutoDL, see the AutoDL Version 2.1 Exchange 2000 Resource Kit at the following Microsoft Web site: