| Event Id | 9556 |
| Source | MSExchangeIS Public Store |
| Description | Unable to set permission for DL /O=Org/OU=Site/cn=Recipients/cn=GroupName because it could not be converted to a security group. This most likely is because your system is in a Mixed domain. |
| Event Information | "According to Microsoft: CAUSE : You can only use Microsoft Windows 2000 Universal Security Groups (USGs) for client permissions. If you try to add a Universal Distribution Group (UDGs) to a client permission, the Exchange information store converts the UDG to a USG. Note This conversion occurs without any notification to the user who is adding the UDG. Only a Native-mode Windows 2000 domain can make this conversion, because USGs are only available in Native mode. If a Mixed mode domain tries to make the conversion, you receive the error messages that are mentioned in the ""Symptoms"" section. Additionally, a domain Recipient Update Service must exist for the Native-mode domain that contains the UDGs. If there is no domain Recipient Update Service, you receive the error messages that are mentioned in the ""Symptoms"" section. RESOLUTION To use a Microsoft Exchange Server 5.5 Distribution List (DL) for client permissions, the DL must be a USG, and USGs can only exist in Native-mode domains. There must be a Native-mode Windows 2000 domain in your forest that can hold the USGs. To accommodate this, you can either convert your existing domain to Native mode, or install another domain that you can use to manage the USGs, and that you can switch to a Native-mode domain. This allows the store process to correctly convert UDGs to USGs. UDGs can only be converted to USGs if a domain Recipient Update Service exists for the domain that contains the UDGs. If you install an Exchange 2000 server or an Exchange 2003 server in the native mode domain, a Recipient Update Service for that domain will be created automatically. Otherwise, you must manually create a domain Recipient Update Service for the domain. Note Make sure to review the domain structure before you convert it to Native mode." |
| Reference Links | You cannot add a dstribution group to permissions of a public folder in Exchange 2000 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.