Forwarding email sent to a Security Group
Ian Russell
I manage an Exchange server (SBS 2003). I have greated a security group with
an email address (Gard...@domain-name.com). The group contains two
individual gardeners who each have mailboxes (first...@domainname.com).
They want to recieve mail that is sent to "Gard...@domain-name.com"
However when I look at that Group in the Active Directory, I cannot see any
mail forwarding options that appear for normal mailboxes.
Can you help please?
Ian
Tony Brown
you need to make a distribution group - not a security group.
thanks,
Tony Brown MCSE +Security +Messaging
www.phillipstaylorbrown.com
Ian Russell
Ok, thanks. I will look into that.
Ian
Andy David {MVP}
If thye are part of the group, why do want to forward mail to them?
Andy David {MVP}
<Tony...@discussions.microsoft.com> wrote:
>Hi Ian,
>
>you need to make a distribution group - not a security group.
Not even a mail-enabled security group?
Ian Russell
There will be mail sent to the generic address "Gardeners@...." they want
this forwarded to their individual individual addresses.
Ian
Martin Blackstone [MVP]
"Tony Brown" <Tony...@discussions.microsoft.com> wrote in message
news:442FCFBC-10EF-4ECF...@microsoft.com...
Lanwench [MVP - Exchange]
> Hi Andy,
>
> There will be mail sent to the generic address "Gardeners@...." they
> want this forwarded to their individual individual addresses.
> Ian
That's why this needs to be a mail-enabled group. In fact, why does it need
to be a security group at all? Mail-enabled security groups can be
dangerous, in that it isn't always clear what they grant (or deny) access
to - I'd stick with universal distribution groups and separate security
groups.
Andy David {MVP}
<IanRu...@discussions.microsoft.com> wrote:
>Hi Andy,
>
>There will be mail sent to the generic address "Gardeners@...." they want
>this forwarded to their individual individual addresses.
So add their accounts to that mail-enabled security group.
Andy David {MVP}
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
>Ian Russell <IanRu...@discussions.microsoft.com> wrote:
>> Hi Andy,
>>
>> There will be mail sent to the generic address "Gardeners@...." they
>> want this forwarded to their individual individual addresses.
>> Ian
>
>That's why this needs to be a mail-enabled group. In fact, why does it need
>to be a security group at all? Mail-enabled security groups can be
>dangerous, in that it isn't always clear what they grant (or deny) access
>to - I'd stick with universal distribution groups and separate security
>groups.
Unless that group is also used to um, grant, access to something.
Lanwench [MVP - Exchange]
> On Tue, 28 Oct 2008 09:34:59 -0400, "Lanwench [MVP - Exchange]"
> <lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
>
>> Ian Russell <IanRu...@discussions.microsoft.com> wrote:
>>> Hi Andy,
>>>
>>> There will be mail sent to the generic address "Gardeners@...." they
>>> want this forwarded to their individual individual addresses.
>>> Ian
>>
>> That's why this needs to be a mail-enabled group. In fact, why does
>> it need to be a security group at all? Mail-enabled security groups
>> can be dangerous, in that it isn't always clear what they grant (or
>> deny) access to - I'd stick with universal distribution groups and
>> separate security groups.
>
> Unless that group is also used to um, grant, access to something.
Right. Which is why I recommended breaking it out into two separate groups -
one for security and one for mail.
Andy David {MVP}
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
>Andy David {MVP} <ada...@pleasekeepinngcheesebucket.com> wrote:
>> On Tue, 28 Oct 2008 09:34:59 -0400, "Lanwench [MVP - Exchange]"
>> <lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
>>
>>> Ian Russell <IanRu...@discussions.microsoft.com> wrote:
>>>> Hi Andy,
>>>>
>>>> There will be mail sent to the generic address "Gardeners@...." they
>>>> want this forwarded to their individual individual addresses.
>>>> Ian
>>>
>>> That's why this needs to be a mail-enabled group. In fact, why does
>>> it need to be a security group at all? Mail-enabled security groups
>>> can be dangerous, in that it isn't always clear what they grant (or
>>> deny) access to - I'd stick with universal distribution groups and
>>> separate security groups.
>>
>> Unless that group is also used to um, grant, access to something.
>
>Right. Which is why I recommended breaking it out into two separate groups -
>one for security and one for mail.
Not so good when you have thousands of users and groups!
Neil Hobson [MVP]
--
Neil Hobson
Exchange MVP
http://www.msexchange.org/Neil_Hobson/
http://www.simple-talk.com/author/neil-hobson/
http://neilhobson.blogspot.com
"Andy David {MVP}" <ada...@pleasekeepinngcheesebucket.com> wrote in message
news:j79eg41tq211hs3uh...@4ax.com...
Lanwench [MVP - Exchange]
> On Tue, 28 Oct 2008 10:06:06 -0400, "Lanwench [MVP - Exchange]"
> <lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
>
>> Andy David {MVP} <ada...@pleasekeepinngcheesebucket.com> wrote:
>>> On Tue, 28 Oct 2008 09:34:59 -0400, "Lanwench [MVP - Exchange]"
>>> <lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
>>>
>>>> Ian Russell <IanRu...@discussions.microsoft.com> wrote:
>>>>> Hi Andy,
>>>>>
>>>>> There will be mail sent to the generic address "Gardeners@...."
>>>>> they want this forwarded to their individual individual addresses.
>>>>> Ian
>>>>
>>>> That's why this needs to be a mail-enabled group. In fact, why does
>>>> it need to be a security group at all? Mail-enabled security groups
>>>> can be dangerous, in that it isn't always clear what they grant (or
>>>> deny) access to - I'd stick with universal distribution groups and
>>>> separate security groups.
>>>
>>> Unless that group is also used to um, grant, access to something.
>>
>> Right. Which is why I recommended breaking it out into two separate
>> groups - one for security and one for mail.
>
> Not so good when you have thousands of users and groups!
Yep, true dat. But I'll bet that isn't the case here. Mail-enabled security
groups can indeed serve a purpose, but it's often dangerous in that people
want to remove someone from a mailing list & forget that the group controls
security over the file system or public folders or whatnot.
Andy David {MVP}
<neil....@nospam.silversands.co.uk> wrote:
>Yeah but the OP did mention SBS in the first post. :-p
It could happen :P
Andy David {MVP}
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
Well, that's why there are processes in place for that. But, as
always, every place is different.
Not sure I would call that dangerous however :P
Ian Russell
I created a mail enabled "Distribution Group" but I still dont see the
option to forward mail...
Ian
Lanwench [MVP - Exchange]
> Hi David,
>
> I created a mail enabled "Distribution Group" but I still dont see the
> option to forward mail...
>
> Ian
You don't forward mail. You add your users to the distribution list (or any
mail-enabled group). Then mail sent to the group is received by all the
members - that's what DLs do.
Since you're using SBS, I suggest you use the SBS "server management"
console to set up your groups.
Ian Russell
>> Hi David,
>>I created a mail enabled "Distribution Group" but I still dont see the<<
>>option to forward mail...<<
Thanks,
Martin Blackstone [MVP]
You add members. Then the members all receive the same mail that is sent to
the DL.
"Ian Russell" <IanRu...@discussions.microsoft.com> wrote in message
news:11061D55-EC39-48A5...@microsoft.com...
Lanwench [MVP - Exchange]
> Hi, Just to join in again, can you help with this last question?
>
>>> Hi David,
>>> I created a mail enabled "Distribution Group" but I still dont see
>>> the<< option to forward mail...<<
>
> Thanks,
> Ian
>
Hi, Ian - have you been reading the other replies in this thread? We've
answered your question several times. If you're having trouble, try using a
news client, such as Forte Agent, Thunderbird, or even Outlook Express,
rather than the pretty clunky web interface to the newsgroups. It's a lot
easier to do nearly everything that way. You can mark messages to be
watched, filter the views so you can see replies to your posts easily, and
search.
The Microsoft public news server is msnews.microsoft.com and you can
subscribe to as many groups as you like; no authentication is required.
The following is from a post by MVP Malke ...
-------------------------------------------------------
Here's information on Usenet and using a newsreader:
http://www.elephantboycomputers.com/page3.html#12-09-02 - a brief
explanation of newsgroups
http://michaelstevenstech.com/outlo...ssnewreader.htm
http://rickrogers.org/setupoe.htm
http://support.microsoft.com/defaul...wto/default.asp
- Set Up Newsreader
http://www.dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
http://aumha.org/nntp.htm - list of MS newsgroups
microsoft.public.test.here - MS group to test if your newsreader is
working properly
http://www.mailmsg.com/SPAM_munging.htm - how to munge email address
http://www.blakjak.demon.co.uk/mul_crss.htm - multiposting vs.
crossposting
Some newsreaders for Windows
http://www.forteinc.com/agent/index.php - for Forte
http://www.mozilla.org (Thunderbird does newsgroups)
http://gravity.tbates.org/
-------------------------------------
