XGEN: Cannot View Security of a Distribution Group That Has Hidden Membership (320102)


The information in this article applies to:

  • Microsoft Exchange 2000 Server
This article was previously published under Q320102

SYMPTOMS

If you click the Security tab of a distribution group or security group, on which you have turned on the Hide Membership Exchange Task, you receive the following error message:
Windows can not edit the permissions on GroupName because they have been written in a nonstandard format by another application. To enable editing, you must use the application to restore the permissions to a standard format.

CAUSE

This behavior can occur because when you turn on the Hide Membership feature it causes Exchange 2000 to prevent you from viewing or modifying a distribution list (DL) through the Exchange System Manager or by other means.

This is to prevent users or processes from compromising the security of the DL. To modify or view the DL membership, you must first unhide the membership of the DL.

WORKAROUND

To work around this behavior, unhide the group membership, modify the permissions that you want, and then re-hide the group membership. To do so, follow these steps:
  1. Start the Active Directory Users and Computers snap-in. To do so, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. Unhide the group membership:
    1. Locate, and then right-click the group whose membership you want to unhide.
    2. On the shortcut menu that appears, click Exchange Tasks, and then click Next.
    3. In the Select a task to perform box, click Unhide Membership, and then click Next.
    4. Click Next, and then click Finish.
  3. Modify the group permissions:
    1. Right-click the distribution group or security group that you want, and then click Properties.
    2. Click the Security tab, and then modify the permissions of the group. When you complete modifying the security permissions, click OK.
  4. Re-hide the group membership:
    1. Right-click the distribution group or security group, and then click Exchange Tasks.
    2. Click Next, in the Select a task to perform box, click Hide Membership, and then click Next.
    3. Click Next, and then click Finish.
  5. Quit the Active Directory Users and Computers snap-in.

STATUS

This behavior is by design.

Modification Type:MinorLast Reviewed:4/25/2005
Keywords:kbnofix kbprb KB320102
©2004 Microsoft Corporation. All rights reserved.