Comments on: Hidding Global Address Lists (GAL) with Exchange 2007

By: Andrey

Andrey — Fri, 13 Nov 2009 22:03:23 +0000

In Exchange 2003 do not add any GALs to the Offline Address Book configuration. If you do, the OAB will show EVERYONE.

If you want OAB to only display specific addresses, you have to base the OAB on an Address List. Not on any Global Address List.

This is documented in some MS KBs.

So basically you have to do double work:
1. create a custom GAL for Outlook Online mode
2. create a custom AL that has the same exact filter as the custom GAL.
3. Create an OAB based on the custom AL.

By: Minifab

Minifab — Wed, 28 Oct 2009 16:35:57 +0000

What a helpfull article !
Thanx a lot, good job

By: Soops

Soops — Thu, 10 Sep 2009 15:18:48 +0000

What a brilliant article.

Thanks so much for your help.

By: elaine

elaine — Wed, 09 Sep 2009 05:15:22 +0000

I use adsiedit.msc edit \default global address list\ safe properties.
add a universal security group to default global address list. deny ‘read and open address list’ afterwards the default global address list is not find. the option hidding.
hope your can tell me some advice about how to find the option(default global address list\
Thank you very much!
I am looking forward to your response.
ELaine

By: Robbie

Robbie — Thu, 03 Sep 2009 20:00:06 +0000

ya know all you have to is make a new list in the gui of exchange, then edit the MSExchQueryBaseDNn for the user using the ADSIEdit tool to place the new DN in the MSExchQueryBaseDNn for the list you just created.

An example.
1) open exchange console.
2) Make new address list and ensure your filter settings are correct. In my case i used Custom Attribute 1 as my ‘filter’
3) Modify the user account (also using the exchange UI) to make the custom Attribute 1 the same as the setting you just set in the address list.
3) Using the ADSIEdit tool, find your the address list you just made in configuration –> services –> Microsoft Exchange –> Your exchagne org (usually the only option ) Address list Container –> All Address Lists. Right lick your list name and select properties.
4) find the filed titeled distinguishedName and copy the contents of the string.
5) find your users using the ADSIEdit tool (explained above).
6)Change the users MSExchQueryBaseDNn field with the content of step 3.

your done.

By: OddyTee

OddyTee — Thu, 27 Aug 2009 21:32:35 +0000

Did any one have any issues with being able to view a contact’s properties in OWA after implementing this solution?

For example, I have 2 segregated orgs … A-Team and B-Team. If someone in A-Team sends a message to another user in A-Team then viewing sender’s contact properties is no issue. However, if someone in A-Team sends a message to a user in the B-Team org, the B-Team user’s cannot view the sender’s contact properties of the A-Team user (in OWA). The message received when trying to view the properties is “Unable to retrieve properties”.

I have an third org that is not segregated and there appears to be no issues at all with viewing contact properties of either the A- or B-Team contact. This only appears to be with the segregated orgs.

Please advise on how I might resolve.

By: Uellington Santos

Uellington Santos — Mon, 15 Jun 2009 14:07:48 +0000

Hi everybody,

I had solve the problem with the distribuction lists using this command on creat the new GAL:

New-GlobalAddressList -ConditionalCustomAttribute15 Test -Name Test -IncludedRecipients AllRecipients

Now I’m using the value AllRecipients to the parameter -IncludedRecipients.

Whit this works fine…

Thanks

By: attispary

attispary — Mon, 08 Jun 2009 05:44:36 +0000

hm.. thank you ))

By: Uellington Santos

Uellington Santos — Wed, 27 May 2009 17:45:50 +0000

This solution is incredible, thanks a lot!

But I have one problem: I only see users in my limited GAL… Is there a way to see distibuction lists (groups) too?

Please, somebody answer…

Thanks…

By: rvillafafila

rvillafafila — Fri, 15 May 2009 12:28:19 +0000

I work with Outlook 2003 as email client with cached mode enabled and after follow steps explained for restricting Outlook I can’t see any of the GAL that I created. In OWA is all OK.
I add the GALs created to the Offline Address Book via EMS with command:
Set-OfflineAddresBook -Addresslist {List of new GALs}

What I’m doing wrong?