| Event Id | 9552 |
| Source | MSExchangeIS Public Store |
| Description | While processing public folder replication, moving user, or copying folders on database "First Storage Group\Public Folder Store (ServerName), DL /O=Org/OU=Site/CN=Recipients/CN=GroupName could not be converted to a security group. Please grant or deny permissions to this DL on Folder (Public Folders)/TestFolders/TestFolder1 again. This most likely is because your system is in a Mixed mode domain. |
| Event Information | "According to Microsoft: CAUSE : You can only use Microsoft Windows 2000 Universal Security Groups (USGs) for client permissions. If you try to add a Universal Distribution Group (UDGs) to a client permission, the Exchange information store converts the UDG to a USG. Note This conversion occurs without any notification to the user who is adding the UDG. Only a Native-mode Windows 2000 domain can make this conversion, because USGs are only available in Native mode. If a Mixed mode domain tries to make the conversion, you receive the error messages that are mentioned in the ""Symptoms"" section. Additionally, a domain Recipient Update Service must exist for the Native-mode domain that contains the UDGs. If there is no domain Recipient Update Service, you receive the error messages that are mentioned in the ""Symptoms"" section. RESOLUTION To use a Microsoft Exchange Server 5.5 Distribution List (DL) for client permissions, the DL must be a USG, and USGs can only exist in Native-mode domains. There must be a Native-mode Windows 2000 domain in your forest that can hold the USGs. To accommodate this, you can either convert your existing domain to Native mode, or install another domain that you can use to manage the USGs, and that you can switch to a Native-mode domain. This allows the store process to correctly convert UDGs to USGs. UDGs can only be converted to USGs if a domain Recipient Update Service exists for the domain that contains the UDGs. If you install an Exchange 2000 server or an Exchange 2003 server in the native mode domain, a Recipient Update Service for that domain will be created automatically. Otherwise, you must manually create a domain Recipient Update Service for the domain. Note Make sure to review the domain structure before you convert it to Native mode." |
| Reference Links | How to troubleshoot public folder performance issues that are related to ACL conversions in Exchange 2000 and in Exchange 2003
You cannot add a dstribution group to permissions of a public folder in Exchange 2000 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.