Changes to the distribution list membership could not be saved. You do not have sufficient permissions to perform this operation on this object

Problem:

Cannot modify Universal Distribution group membership

Environment:

Empty root domain, Child Doman A, Child Domain B. The Universal DLs are created in Child Domain A and the owner of these DL's are residing in Child domain B.

Problem:

When the owner of DL's Tries to modify the membership list following error is appears

Changes to the distribution list membership could not be saved. You do not have sufficient permissions to perform this operation on this object.

Explanation:

This behavior can occur if you have a user group in one Active Directory domain and a distribution group in another domain. Each domain has its own global catalog. When a user tries to manage DL membership by using Microsoft Outlook Address Book, the user who has the permission to manage the DL receives the "do not have sufficient permissions" error message.

A global catalog contains a subset of all objects in the forest; it is only writable for the objects from its own domain. All Outlook requests are processed on the global catalog server of the user's domain. A user can only manage distribution groups that are in the user's domain, because the user's global catalog has a read-only copy of other objects.

Resolution:

To resolve this behavior, you can use the AutoDL tool to manage DLs. This tool is located on the Exchange 2000 Resource Kit CD-ROM. Alternatively; you can assign the DL and user group in the same domain

http://www.microsoft.com/exchange/downloads/2000/AutoDL.asp

We have decide to leave the groups intact and update the group's membership manually using account residing on Child domain A, since the Dl is mapping some inhouse applications

 

Best

Oz ozugurlu