Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-04-23

This topic explains how to use the Exchange Management Console and the Exchange Management Shell to create a new security group in Microsoft Exchange Server 2007.

Note:
By default, all new distribution groups require that all senders be authenticated. This prevents external senders from sending messages to distribution groups. This default setting is different from previous versions of Exchange where, by default, new distribution groups accepted messages from all senders. To configure a distribution group to accept messages from all senders in Exchange 2007, you must modify the message delivery restriction settings for that distribution group. For more information about configuring message delivery restrictions, see How to Configure Message Delivery Restrictions.

Before You Begin

To perform the following procedures, the account you use must be delegated the following:

  • Exchange Recipient Administrator role

  • Account Operator role for the applicable Active Directory containers

For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.

Important:
If you want to create a new security group in a domain that is different than the one in which your Exchange servers reside, you must first prepare that domain for Exchange 2007. To learn more about preparing a domain for Exchange 2007, see How to Prepare Active Directory and Domains.

Procedure

To use the Exchange Management Console to create a new security group

  1. Start the Exchange Management Console.

  2. In the console tree, expand Recipient Configuration, and then click Distribution Group.

  3. In the action pane, click New Distribution Group. The New Distribution Group wizard appears.

  4. On the Introduction page, click New Group, and then click Next.

  5. On the Group Information page, complete the following fields:

    • Group type   Click Security.

    • Organizational unit   By default, the New Distribution Group wizard displays the Users container in the Active Directory directory service. To change the default organizational unit (OU), click Browse, and then select the OU you want.

    • Name   Type the group name you want.

    • Name (pre-Windows 2000)   By default, the group name for operating systems earlier than Microsoft Windows 2000 Server is the same as the Group name. You can modify the name in this field.

    • Alias   By default, the alias is the same as the group name. You can modify the name in this field.

  6. Click Next.

  7. On the New Distribution Group page, review the Configuration Summary. To make any configuration changes, click Back. To create the new security group, click New.

  8. On the Completion page, the Summary states whether the security group was successfully created. The summary also displays the Exchange Management Shell command that was used to create the security group.

  9. Click Finish.

To use the Exchange Management Shell to create a new security group

  • Run the following command:

    Copy Code 
    New-DistributionGroup -Name "Managers" -OrganizationalUnit "contoso.com/Users" -SAMAccountName "Managers" -Type "Security"

For detailed syntax and parameter information, see the New-DistributionGroup reference topic.

For More Information

For more information about the Exchange Management Shell, see Using the Exchange Management Shell.