Topic Last Modified: 2006-09-06

The Microsoft® Exchange Server Analyzer Tool queries the following attributes for each Routing Group Connector object (msExchRoutingGroupConnector) detected in the Active Directory® directory service to determine whether they have delivery restrictions set based on distribution group membership.

dLMemRejectPerms

Contains the domain names (DNs) of distribution lists (DL) whose members may not send through this Routing Group Connector.

dLMemSubmitPerms

Contains the domain names (DNs) of distribution lists (DL) whose members may send through this Routing Group Connector.

If the Exchange Server Analyzer determines that there are routing group connectors that have delivery restrictions set based on distribution group membership, the Exchange Server Analyzer displays a warning.

This warning indicates that delivery restrictions based on distribution group membership may affect Exchange mail flow performance.

When you send mail by using routing group connectors that have delivery restrictions set based on distribution group membership, the message categorizer must expand the membership of the distribution group, obtain the full list of DNs of the members, and then compare the list of DNs to the list sender’s DNs. An access operation or a deny operation occurs when a DN on both lists match. If a distribution group is nested in another distribution group, the nested distribution is also expanded.

To address this warning:

For More Information

For more information about non-hierarchal restriction checking, see Consider non-hierarchical restriction checking

For more information about SMTP sender filtering, see "How to Enable Sender Filtering" in the Administration Guide for Exchange Server 2003 (http://go.microsoft.com/fwlink/?LinkId=72967).

For more information about the effect of distribution group restriction on Exchange mail flow, see the following Microsoft Knowledge Base articles: