XGEN: How to Use Exchange Server 5.5 Distribution Lists in Exchange 2000 Public Folder Permissions

In Microsoft Exchange Server 5.5, distribution lists are a convenient way to group users and assign public folder permissions. To retain these permissions when you migrate to Exchange 2000, make sure that your distribution lists convert properly. Otherwise, some public folders might become inaccessible. This article describes how to use Exchange Server distribution lists in Exchange 2000 public folder permissions.

When you migrate to Exchange 2000 or introduce Exchange 2000 servers into your organization, Exchange Server distribution lists convert to Microsoft Windows 2000 Server universal distribution groups.

Using Exchange Server Distribution Lists

If an Exchange Server public folder access control list (ACL) contains a distribution list and the public folder is replicated to an Exchange 2000 server, the distribution list converts to a universal distribution group. However, to set permissions, Exchange 2000 uses Windows 2000 universal security groups instead of universal distribution groups.

If the server that is running Exchange 2000 is located in a Windows 2000 domain that is in native mode, the universal distribution group automatically converts to a universal security group when a user gains access to the public folder. However, if the server is located in a Windows 2000 domain that is in mixed mode, the conversion to a universal security group does not occur. Without a successful conversion of public folder permissions, all users lose access to the public folder.

Likewise, if you try to assign public folder permissions to a universal distribution group that was converted from an Exchange Server distribution list, the server that is running Exchange 2000 cannot create a universal security group and the following problems occur:

• In System Manager, error number 80004005 appears and you receive the following message:
  The operation failed.
• In Microsoft Outlook, you receive the following error message:
  The Client Operation Failed.
• In Event Viewer, under Application, event number 9556 or 9552 appears.
  
  
• Exchange 2000 users cannot see the public folder in Microsoft Outlook.

Make sure that your organization contains at least one native-mode Windows 2000 domain in which you can store and manage universal security groups. You can either convert an existing domain to native mode or create a new native-mode domain. Then configure a recipient Connection Agreement to replicate the Exchange Server distribution lists to the native-mode Windows 2000 domain.

REFERENCES

For additional information, click the article number below to view the article in the Microsoft Knowledge Base: