Auschten
Fri Jul 25 15:06:17 CDT 2008
Yes, I have watched him do it and done it for him while remoted in to his
computer while he is logged in. The error he gets anytime he tries to modify
any DL I give him rights to is "Changes to the distribution list membership
cannot be saved. You do not have sufficient permission to perfom this
operation on this object."
Auschten
"Susan" wrote:
> is he actually getting an error? what's happening when he tries to modify
> the list? have you watched?
>
> --
> Susan Conkey [MVP]
>
>
>
> "Auschten" <Auschten@discussions.microsoft.com> wrote in message
> news:62C3A0DD-C8FE-4A6E-AE41-6DACF11C592A@microsoft.com...
> > The user assures me this worked about three weeks ago.
> >
> > Auschten
> >
> > "Susan" wrote:
> >
> >> and you're certain this was working before?
> >>
> >> --
> >> Susan Conkey [MVP]
> >>
> >>
> >>
> >> "Auschten" <Auschten@discussions.microsoft.com> wrote in message
> >> news:5B3580A7-E524-459B-87C8-6D415A511C3D@microsoft.com...
> >> > Yup, the DLs are Universal. Just one domain. I've removed and readded
> >> > his
> >> > permissions numerous times. I've had other admins do it, too, just to
> >> > make
> >> > sure I wasn't doing it wrong or there was a problem with my account.
> >> >
> >> > Auschten
> >> >
> >> > "Susan" wrote:
> >> >
> >> >> hmmm...not typical behavior, at all...if it's just him, there must be
> >> >> something wrong with his account...DLs are universal? how many
> >> >> domains
> >> >> involved? more than one? have you tried removing the permissions,
> >> >> then
> >> >> readding them?
> >> >>
> >> >> --
> >> >> Susan Conkey [MVP]
> >> >>
> >> >>
> >> >>
> >> >> "Auschten" <Auschten@discussions.microsoft.com> wrote in message
> >> >> news:6CFB1358-561D-428F-8658-6BCC2D40C7CC@microsoft.com...
> >> >> > Neither he nor any group have any explicit Denies against this DL.
> >> >> > I've
> >> >> > checked both the Object and Properties tabs. His own AD account has
> >> >> > no
> >> >> > Denies.
> >> >> >
> >> >> > Auschten
> >> >> >
> >> >> > "Susan" wrote:
> >> >> >
> >> >> >> if you look in the Advanced permissions, are there any "Denies" on
> >> >> >> his
> >> >> >> account on these DLs? has his account been added to any domain
> >> >> >> admins
> >> >> >> group
> >> >> >> or anything like that ?
> >> >> >>
> >> >> >> --
> >> >> >> Susan Conkey [MVP]
> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >> "Auschten" <Auschten@discussions.microsoft.com> wrote in message
> >> >> >> news:31ED7FED-27F0-45B4-BDC3-D699538B7F0E@microsoft.com...
> >> >> >> > Thanks for the link. I followed the advice in this KB article,
> >> >> >> > giving
> >> >> >> > the
> >> >> >> > user Full Control over the DL, had him reboot, but he still can't
> >> >> >> > manage
> >> >> >> > it.
> >> >> >> > Could there be some sort of security setting messed up in his AD
> >> >> >> > account,
> >> >> >> > since he can't seem to manage ANY DL anymore, but none of my
> >> >> >> > other
> >> >> >> > users
> >> >> >> > have
> >> >> >> > any problems?
> >> >> >> >
> >> >> >> > Auschten
> >> >> >> >
> >> >> >> > "John Fullbright" wrote:
> >> >> >> >
> >> >> >> >> I was thinking of this issue.
> >> >> >> >>
> >> >> >> >>
http://support.microsoft.com/kb/318074/en-us
> >> >> >> >>
> >> >> >> >>
> >> >> >> >> "Auschten" <Auschten@discussions.microsoft.com> wrote in message
> >> >> >> >> news:FD41849E-EEF7-4A64-961D-4165B511E2E9@microsoft.com...
> >> >> >> >> > AFAIK it's a writable partition, since I can have other users
> >> >> >> >> > manage
> >> >> >> >> > the
> >> >> >> >> > DL
> >> >> >> >> > and then change its membership.
> >> >> >> >> >
> >> >> >> >> > Auschten
> >> >> >> >> >
> >> >> >> >> > "John Fullbright" wrote:
> >> >> >> >> >
> >> >> >> >> >> Which GC does the client connect to? Is it a writable
> >> >> >> >> >> partition
> >> >> >> >> >> for
> >> >> >> >> >> the
> >> >> >> >> >> DL
> >> >> >> >> >> object?
> >> >> >> >> >>
> >> >> >> >> >>
> >> >> >> >> >> "Auschten" <Auschten@discussions.microsoft.com> wrote in
> >> >> >> >> >> message
> >> >> >> >> >> news:904AF6B6-2A7B-456F-B62F-A1ED24C8A0C9@microsoft.com...
> >> >> >> >> >> >I have a user who used to be able to manage a certain distro
> >> >> >> >> >> >list
> >> >> >> >> >> >through
> >> >> >> >> >> >the
> >> >> >> >> >> > GAL. One day this seemed to stop working (he says it was
> >> >> >> >> >> > after
> >> >> >> >> >> > Office
> >> >> >> >> >> > 2007
> >> >> >> >> >> > got pushed, but I'm not sure). I have removed and re-added
> >> >> >> >> >> > him
> >> >> >> >> >> > as
> >> >> >> >> >> > manager
> >> >> >> >> >> > in
> >> >> >> >> >> > AD, but he continues to get an insufficient privledges
> >> >> >> >> >> > error
> >> >> >> >> >> > whenever
> >> >> >> >> >> > he
> >> >> >> >> >> > tries to change the membership. Anyone else can manage that
> >> >> >> >> >> > list
> >> >> >> >> >> > if
> >> >> >> >> >> > I
> >> >> >> >> >> > give
> >> >> >> >> >> > them permissions. I finally found that he cannot manage ANY
> >> >> >> >> >> > list.
> >> >> >> >> >> > I
> >> >> >> >> >> > logged
> >> >> >> >> >> > him in to another computer and tried there, but got the
> >> >> >> >> >> > same
> >> >> >> >> >> > error.
> >> >> >> >> >> > I
> >> >> >> >> >> > even
> >> >> >> >> >> > created a new group, added him to that group, gave the
> >> >> >> >> >> > group
> >> >> >> >> >> > rights
> >> >> >> >> >> > to
> >> >> >> >> >> > manage
> >> >> >> >> >> > the list, but again he got the error. No one else in the
> >> >> >> >> >> > company
> >> >> >> >> >> > is
> >> >> >> >> >> > having
> >> >> >> >> >> > this kind of problem. I cannot re-create his account due to
> >> >> >> >> >> > the
> >> >> >> >> >> > numerous
> >> >> >> >> >> > issues this might cause with SIDs. Any ideas?
> >> >> >> >> >> >
> >> >> >> >> >> > Thanks!
> >> >> >> >> >> > Auschten
> >> >> >> >> >>
> >> >> >> >> >>
> >> >> >> >> >>
> >> >> >> >>
> >> >> >> >>
> >> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>