Our organisation is trying to move to a AGDLP model where User accounts (A) are added to global security groups (G) represent business roles or job functions within the domain. Domain security groups, are added to domain local groups (DL) which give the permissions (P) or user rights to resources to which they are assigned.
When considering the scenarios this will be used, Exchange 2010 seems to completely break the mould, using Universal distribution lists. My knowledge lays in AD, not Exchange, so I just wanted to ask if I was missing something, as if I add the universal distribution list to the security group role the membership can't be viewed in Outlook and the message fails.
How have you overcome this within your organisation?
Thanks for your time