security group naming conventions

[Jason Gallas]

I am adding distribution groups to my exchange organization and since
they cannot be the same name as the existing security groups I am
going to rename the security groups to something with an S in it. For
example: S-Accounting or S_Accounting or sAccounting. I was wondering
if there were any issues with a dash or underscore in group names?
What legal characters are available for naming these groups?

 

[Joe Richards [MVP]]

No issue with dash or underscore but it generally isn't good to try and name
them based on type. The first time someone (and I mean anyone with an Exchange
mailbox, not just admins) takes a Distribution Group and uses it to ACL a folder
or calendar or something in outlook, that DL will become a security group.

If you are just looking for a way to identify a security versus non-security
group, you can do it with simple LDAP queries.


joe

 

[Jason Gallas]

On Tue, 05 Oct 2004 17:57:28 -0400, "Joe Richards [MVP]"

:No issue with dash or underscore but it generally isn't good to try and name
:them based on type. The first time someone (and I mean anyone with an Exchange
:mailbox, not just admins) takes a Distribution Group and uses it to ACL a folder
r calendar or something in outlook, that DL will become a security group.
:
:If you are just looking for a way to identify a security versus non-security
:group, you can do it with simple LDAP queries.

I was really looking for a way to make the display names in the Global
Address list more user friendly. I first thought of naming them
AccountingDist for example but Accounting would be much better, but
since that name "Accounting" is already used for the security group I
can't.

 

[Joe Richards [MVP]]

You realize of course your GAL display name does not have to match the
samaccountname and cn of the group name. You could name them anything you want
in the GAL. It is generally better to have the names sync up for less confusion
for support folks but they don't have to. It is like having the userid
domain\userid having a GAL display name of UserID LastName Jr. or LastName Jr.,
UserID

joe

 

[Jason Gallas]

On Thu, 07 Oct 2004 00:02:52 -0400, "Joe Richards [MVP]"

:You realize of course your GAL display name does not have to match the
:samaccountname and cn of the group name. You could name them anything you want
:in the GAL. It is generally better to have the names sync up for less confusion
:for support folks but they don't have to. It is like having the userid
:domain\userid having a GAL display name of UserID LastName Jr. or LastName Jr.,
:UserID

That makes sense. How would I accomplish this using query based
distribution groups (exch 2003)? For example I would like to name the
group "AccountingDist" but have it show up in the display when
somebody writes a new email as simply "Accounting".

 

[Joe Richards [MVP]]

From the GUI you should be able to select the Exchange General tab of the group
and change Display Name. In AD directly, you would change the displayName property.

joe