converting mail enabled security group to distribution group

Question

Hello,

I am getting error : "You don't have sufficient permissions. This operation can only be performed by a manager of the group" while adding owner in mail enabled security group (scope: universal) via Exchange Admin Center (EAC). However, I am able to modify membership and ownership details of mail enabled universal distribution groups (aka Distribution list).

So does it mean that I don't have "Security group creation and membership" role assigned to "Recipient Management" role group? What if I change group type from security to distribution, adding owners and then reverting group type distribution to security? Will it work without causing any resource access issue? Will there be any negative impact due to this? If I revert group type from distribution to security, then will it retain original objectSID value or will assign new objectSid value? Shall I assign "Security group creation and membership" role assign to "Recipient Management" role group to fix this? Please suggest best possible way to resolve the issue.

Looking forward to answer and explanation on above mentioned questions.

Answer 1

Use the -BypassSecurityGroupManagerCheck switch

Set-DistributionGroup <group> -ManagedBy @{Add="NewOwner"} -BypassSecurityGroupManagerCheck  

https://learn.microsoft.com/en-us/powershell/module/exchange/set-distributiongroup?view=exchange-ps