Config Helper » Active Directory http://www.confighelper.com Technology Configuration and Support Site Thu, 30 Jun 2011 13:32:20 +0000 en hourly 1 http://wordpress.org/?v=3.2.1 Exchange Distribution List Owner Unable to Make Changes to Membership http://www.confighelper.com/2010/12/exchange-distribution-list-owner-unable-to-make-changes-to-membership.html http://www.confighelper.com/2010/12/exchange-distribution-list-owner-unable-to-make-changes-to-membership.html#comments Mon, 06 Dec 2010 11:38:01 +0000 admin http://www.confighelper.com/?p=165 Problem: When the owner of a distribution list is trying to update the membership through Outlook he receives a message that states, "Changes to the distribution list membership cannot be saved. You do not have sufficient permission perform this operation on this object."

This can be fixed quite easily. Open Active Directory Users and Computers and locate the security group that represents the distribution list. Right-click the object and choose Properties, then click the Managed By tab. Check the box that says "Manager can update membership list" and the user should now be able to make changes to the DL.

2000 MASTERING MICROSOFT EXCHANGE SERVER 0782127967 BARRY GERBER 2000 MASTERING MICROSOFT EXCHANGE SERVER 0782127967 BARRY GERBER Paypal 0 Bid US $7.99 50m
MICROSOFT T-SHIRT windows 7 exchange xp server 2008 MICROSOFT T-SHIRT windows 7 exchange xp server 2008 Paypal US $8.49 13d 4h 33m
Microsoft Exchange Server 2010 Best Practices (2010,... Microsoft Exchange Server 2010 Best Practices (2010,... Paypal US $29.99 4d 14h 38m
NEW - Mastering Microsoft Exchange Server 2010 NEW - Mastering Microsoft Exchange Server 2010 Paypal US $24.48 2d 13h 59m
MICROSOFT T-SHIRT windows 7 exchange xp server 2008 MICROSOFT T-SHIRT windows 7 exchange xp server 2008 Paypal US $8.49 13d 4h 33m
MICROSOFT T-SHIRT windows 7 exchange xp server 2008 MICROSOFT T-SHIRT windows 7 exchange xp server 2008 Paypal US $8.49 13d 4h 33m
MICROSOFT EXCHANGE SERVER Enterprise Edition 5.0 New! Sealed! 2 cd set MICROSOFT EXCHANGE SERVER Enterprise Edition 5.0 New! Sealed! 2 cd set Paypal 0 Bid US $9.97 1d 17h 49m
MCSE Guide to Microsoft Exchange Server 2003 Administration by Larry... MCSE Guide to Microsoft Exchange Server 2003 Administration by Larry... Paypal US $14.00 2d 10h 34m
NEW Microsoft Exchange Server 2010 Standard Edition - 6 NEW Microsoft Exchange Server 2010 Standard Edition - 6 Paypal US $1,151.99 17d 6h 22m
NEW - Mastering Microsoft Exchange Server 2007 SP1 NEW - Mastering Microsoft Exchange Server 2007 SP1 Paypal US $8.13 29d 15h 25m
Powered by phpBay Pro
]]> http://www.confighelper.com/2010/12/exchange-distribution-list-owner-unable-to-make-changes-to-membership.html/feed 0 Active Directory Account Lockout Troubleshooting http://www.confighelper.com/2010/06/active-directory-account-lockout-troubleshooting.html http://www.confighelper.com/2010/06/active-directory-account-lockout-troubleshooting.html#comments Thu, 17 Jun 2010 22:24:48 +0000 admin http://www.confighelper.com/?p=89 If you are troubleshooting why an Active Directory account is being locked out randomly or if you need additional password information for a specific account  then there is a great free utility you can use that will help you. The tool is part of the Windows 2003 Resource Kit and can be downloaded from the Microsoft site. Once you download the Resource Kit, the specific utility you want is called acctinfo.dll. Copy acctinfo.dll from the location of the Resource Kit install (by default: C:\Program Files\Windows Resource Kits\Tools) to the system32 folder (C:\WINDOWS\system32). After you copy the file then run this command to register the dll - regsvr32 c:\windows\system32\acctinfo.dll

 

The tool is now installed and can be accessed from Active Directory Users and Computers snap-in. When you view the properties of a user there will now be a new tab called Additional Account Info.

active directory account lockout troubleshooting

When you click on the tab, you will see a ton of information that was not previously available, at least not easily available. The fields you will see are Password Last Set, Password Expires, whether the account is currently locked out or not, Last-Logon-Timestamp, SID, GUID. You will also see the Last Logon and Last Logoff time, the Last Bad Logon time, the number of times that user has logged onto the domain under Logon Count, and then the current Bad Password Count. Keep in mind that the Bad Password Count will reset according to the password policy in effect on the domain. Also, if you click the Domain PW Info… button you will see the Domain Password Policy.

domain password policy

There is a great deal of information available with this utility and it is great for tracking down annoying lockout issues. Using the Last Bad Logon information, you can think about what scheduled tasks might be running at that time that is using a certain account with an old expired password, possibly a service account running a scheduled job. Hopefully you found this information useful and please take time to review our other articles. Additionally, if this article has helped you then please feel free to link back to it or to the ConfigHelper site.

<table cellpadding="0" cellspacing="0" border="0"><tr><td><img src="http://www.confighelper.com/images/0/" /><td></tr><tr><td><td></tr></table>

]]> http://www.confighelper.com/2010/06/active-directory-account-lockout-troubleshooting.html/feed 4