When you delegate Exchange roles to a security group, it is recommended that you use Global or Universal security groups and not Domain Local security groups.