my environment consists of win four 2k3 DC, running one exchange 2007 and one setup as an SCR. clients are all running running outlook 2010. i created them as security groups on the exchange server, and mail enabled them. i originally set them to universal groups but when i went to add them to my public folder permissions they have a red circle with a line through them all. so i changed them to global groups and if i select it i get this error: one or more users cannot be added to the folder access list. Non-Local users cannot be given rights on this server. all users in the security group are apart of the domain only. i have included a photo: add sec group to PF permissions i noticed that all security groups that i have created using the EMC on exchange 2007 over the past3-4 years are showing this red circle with a line through it. how can i fix this. not sure where to go from here to resolve it. please advise.. thanks

I would set to universal and make sure any other groups that the group contains are also universal. Can you test with both a security and dl group.Sukh

i originally set them as universal. they only contain users accounts, no other groups. i reset a couple back to mail-enabled Universal Groups in the Exchange 2007 EMC. to update the GAL using the EMS is it just a update-globaladdress list -identity "GAL name"? or are there other steps to push it out throughout the organization. i have manually downloaded the offline address book in outlook 2010 on my vmclient but that did not change anything.

Can you check using online mode or by selecting All Group from the GAL.Sukh

switched to online mode, but the result is still the same. the mail-enabled universal groups that i switched are still showing with the red circle and line through it. ***update*** previously today as a test i created a universal security group using ADUC on my win 2k3 DC, then hopped over to exchange 2007 box and using the EMC mail enabled it that same group. since i switched to online mode i just checked it and is showing up fine with no red circle. why would that work that way, but it not work when i create the group and mail enable it using just the exchange 07 EMC?

You can get this resolved by running the command and wait for outlook address book generation to be completed. Set-DistributionGroup -identity "GroupName" Reference: http://social.technet.microsoft.com/Forums/en-US/exchangesvrclients/thread/df6da1f4-2ca8-41b5-9c2c-28ca3723f9d2/ I have tried it many times myself and it worked for me.

thanks Rajitha Chimmani, that worked like a champ. just curious as to why they werent created that way to begin with. i didnt set them up as UDG, i created all of them as USG initally using the EMC on my exchange 2007 box.