Announcement

Collapse
No announcement yet.

Outlook Calendar group permissions

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Outlook Calendar group permissions

    In outlook 2003 client with Exchange 2000 backend, for any calendar I can apply permissions at the individual user level, but when I try to apply permissions at the group level I get error message: "the modified permissions could not be saved". ie the group is a distribution group available in the GAL. Yet, I can apply delegate group permissions to the same calendar ! Can anyone enlighten me ?

  • #2
    Re: Outlook Calendar group permissions

    You can't give permissions to a distribution group - only to security group.

    - Just change the group type in the AD (in the group properties from Distribution to Security).
    CNE 5, CCA, MCSE NT4.0-2003, MCSE 2003 messaging, Exchange Server MVP.
    Tzahi Kolber - IT Supervisor
    Polycom Israel.

    Comment


    • #3
      Re: Outlook Calendar group permissions

      I would be happy to apply permissions to security groups as you suggest, if only they would appear in the Global Address List (when trying to apply permission to a goup for a calendar in outlook) ! To my knowledge, only distribution groups appear in the Exchange GAL. Secondly, even if I could be convinced that it was possible, how can I change the properties of the group from distribution to security when the option is always greyed out ? I'm using Exchange 2000 with outlook 2003.
      Last edited by jopp1; 1st March 2007, 11:37.

      Comment


      • #4
        Re: Outlook Calendar group permissions

        Security groups can be listed in the GAL, you just have to create the group an email address :
        AD - right click on the group - Exchange Tasks - Establish an email address to group.
        CNE 5, CCA, MCSE NT4.0-2003, MCSE 2003 messaging, Exchange Server MVP.
        Tzahi Kolber - IT Supervisor
        Polycom Israel.

        Comment


        • #5
          Re: Outlook Calendar group permissions

          Your suggestion worked great - thanks tkolber, although once I applied the permissions to the security group it took 15-30min for the permissions to flow to an individual user within the group so that they could access the calendar ("unable to display folder" message for some time). Any thoughts on this ?
          You also mentioned in an earlier post that I could convert a distribution group to a security group within properties of the distribution group by simply selecting the 'security' button, however it is greyed out ? Any suggestions on this ?
          Your assistance is greatly appreciated.

          Comment


          • #6
            Re: Outlook Calendar group permissions

            1. About the time that was taken for the changes to take place - I guess its related to AD replication.
            2. About the Security option which was grayed out - I don't understand - did you make the change or you created a new group? if a distribution group containes one or more contacts - it can't be converted into security group.
            CNE 5, CCA, MCSE NT4.0-2003, MCSE 2003 messaging, Exchange Server MVP.
            Tzahi Kolber - IT Supervisor
            Polycom Israel.

            Comment


            • #7
              Re: Outlook Calendar group permissions

              I'll leave the AD synchronisation as a separate matter for now. As for the Security option which was grayed out: I did both: ie when I create a new group, I have the option of selecting either distribution or security - no problems. However, when I take an existing distribution group and try to change it from a distribution group to a security group, the 'security' option is greyed out. (I should point out that the groups are global groups - not universal - does this make a difference ?).

              PS - I made sure there were no contacts in the distribution group, and went as far as deleting all members to be sure - no difference).

              Comment


              • #8
                Re: Outlook Calendar group permissions

                The delay to permissions taking effect is perfectly normal. It has nothing to do with replication - it is down to the way that Exchange works. Exchange caches permissions and those permissions are only refreshed at frequent intervals.

                With some permission changes it can take two hours before they are fully active.

                Simon.
                --
                Simon Butler
                Exchange MVP

                Blog: http://blog.sembee.co.uk/
                More Exchange Content: http://exchange.sembee.info/
                Exchange Resources List: http://exbpa.com/
                In the UK? Hire me: http://www.sembee.co.uk/

                Sembee is a registered trademark, used here with permission.

                Comment


                • #9
                  Re: Outlook Calendar group permissions

                  Thanks Simon. Any clues on how one can force Exchange to refresh its permissions from cache on demand rather than waiting say 2 hours of more for it to 'naturally' happen. My users are generally not that patient !

                  Comment


                  • #10
                    Re: Outlook Calendar group permissions

                    The only way to force the change is to restart the Exchange services - which will kick everyone out of email.

                    Simon.
                    --
                    Simon Butler
                    Exchange MVP

                    Blog: http://blog.sembee.co.uk/
                    More Exchange Content: http://exchange.sembee.info/
                    Exchange Resources List: http://exbpa.com/
                    In the UK? Hire me: http://www.sembee.co.uk/

                    Sembee is a registered trademark, used here with permission.

                    Comment


                    • #11
                      Re: Outlook Calendar group permissions

                      If the only way to force the change is to restart the Exchange services - which will kick everyone out of email, or wait upto 2 hours for the change to happen naturally, then I think I'll give up on using Group permissions in Outlook/Exchange. PS - I'd love to know why Microsoft would have designed such a hideous mechanism. thanks anyway

                      Comment


                      • #12
                        Re: Outlook Calendar group permissions

                        The reason Exchange caches permissions is for performance. Remember Exchange is a large scale email application - the server can take many 100s of users. If some caching of permissions is not carried out then the machine would be constantly thrashing the domain controllers on queries.

                        Thing is though... if you check the permission first, then the permission isn't cached. A change to the permission is then live when you first try to use it.

                        Simon.
                        --
                        Simon Butler
                        Exchange MVP

                        Blog: http://blog.sembee.co.uk/
                        More Exchange Content: http://exchange.sembee.info/
                        Exchange Resources List: http://exbpa.com/
                        In the UK? Hire me: http://www.sembee.co.uk/

                        Sembee is a registered trademark, used here with permission.

                        Comment


                        • #13
                          Re: Outlook Calendar group permissions

                          I think you may have just provided what I was after but can you please elaborate on what you mean by "you check the permission first, then the permission isn't cached. A change to the permission is then live when you first try to use it." ta

                          Comment


                          • #14
                            Re: Outlook Calendar group permissions

                            Simple - if a user asks if they have permission to do x, I check it, rather than ask them to try it and see if it fails.
                            When I am working with my own account permissions I presume always that I do not have permissions, so will always check the permission first. This is also caused by own operational practises where I remove permissions after I have finished with them (particularly full mailbox access permission).

                            Simon.
                            --
                            Simon Butler
                            Exchange MVP

                            Blog: http://blog.sembee.co.uk/
                            More Exchange Content: http://exchange.sembee.info/
                            Exchange Resources List: http://exbpa.com/
                            In the UK? Hire me: http://www.sembee.co.uk/

                            Sembee is a registered trademark, used here with permission.

                            Comment


                            • #15
                              Re: Outlook Calendar group permissions

                              Thanks Simon. Not exactly the way I would like to see the permissions work but I guess I can live with it.

                              Comment

                              Working...
                              X