MemberOfGroup Failing?
I have seen this commented upon in other forums with no resolution so I thought I would bring this directly to Microsoft...
I am trying to set up a dynamic distribution group based on a static group membership (and a couple of other factors). I use the following:
Set-DynamicDistributionGroup -Identity "mymaillist" -RecipientFilter "((RecipientType -eq 'MailContact' -and MemberOfGroup -eq 'cn=MyGroup,ou=MyOU,dc=subdom,dc=domain,dc=local') -or (DistinguishedName -eq 'cn=My User,dc=domain,dc=local'))"
This command runs fine. However, when you do a Get-DynamicDistributionGroup, the RecipientFilter has changed the group name to 'subdom.domain.local/MyOU/MyGroup' LdapRecipientFilterlooks correct. When I try to preview the list in the MMC, it crashes the MMC stating that subdom.domain.local/MyOU/MyGroup is not a valid AD distinguished name.
When I run get-recipient -RecipientpreviewFilter{"((RecipientType -eq 'MailContact' -and MemberOfGroup -eq 'cn=MyGroup,ou=MyOU,dc=subdom,dc=domain,dc=local') -or (DistinguishedName -eq 'cn=My User,dc=domain,dc=local'))} it works fine.
It appears this adversely affects address lists. Will this bug keep the dynamic group from working, too? If so, is Microsoft working on a fix? I am running Exch 2007, SP1, fully up-to-date.
Thanks in advance.
Pete
March 6th, 2008 2:19am
This incorrect translation of the group name does appear to have an effect. I edited it in the Active Directory using adsiedit to use the distinguished name. When I look at it in the MMC preview, it works fine.
adsiedit is not a legitimate work-around but it may help those having the issue with MemberOfGroup until Microsoft fixes it.
Free Windows Admin Tool Kit Click here and download it now
March 6th, 2008 2:42am
And this just when I promised my users that I'd create a distribution group based on group membership...
[PS] C:\> Set-DynamicDistributionGroup 'san francisco all users' -RecipientFilter "MemberOfGroup -eq 'CN=My Group,OU=Email Address Groups,DC=domain,DC=com'"
[PS] C:\> $x = Get-DynamicDistributionGroup "san francisco all users"
[PS] C:\> Get-Recipient -RecipientPreviewFilter $x.RecipientFilter
Cannot convert value "domain.com/Email Address Groups/My Group" to type "Microsoft.Exchange.Data.Directory.ADObjectId". Error: "The string
"domain.com/Email Address Groups/My Group" does notrepresent a valid distinguished name."At line:1 char:1
I'll take a crack at using adsiedit to get it working. It'd be nice to have all the wrinkles in MemberOfGroup smoothed out once and for all.
April 4th, 2008 11:16pm