RE: Attempting to hide Global Address List and give each ou their own

  • From: "Michael B. Smith" <michael@xxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 5 Jan 2005 16:50:20 -0500

Install EXBPA and the web update and see what it tells you, is what I
would next do.

You may have to go here:
http://www.microsoft.com/technet/prodtechnol/Exchange/guides/E2k3ADPerm/
3e85a375-7745-4423-80f7-029774d2c572.mspx and manually reset the
permissions on the Address Lists Container.

If neither of those do it - you need to call PSS. :-( 

-----Original Message-----
From: Dan Grube [mailto:DanGrube@xxxxxxxxxxxxxxx] 
Sent: Tuesday, January 04, 2005 1:18 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

Didn't seem to fly, I believe its because when did all of that I
unchecked the 'Allow inheritable permissions from parents to propagate
to this object ...' off the advanced button on the security tab. I
really boogerd this one up!!! I hoping you save the day because I really
step in this one.

Thanks a bunch

-----Original Message-----
From: Michael B. Smith [mailto:michael@xxxxxxxxxx]
Sent: Monday, January 03, 2005 10:22 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

Just for grins and giggles, add "Authenticated Users" manually with Full
Control. Let it replicate and see if it gives you what you need.

(The Deny's without anything in them are usually actually auditing
entries.) 

-----Original Message-----
From: Dan Grube [mailto:DanGrube@xxxxxxxxxxxxxxx]
Sent: Monday, January 03, 2005 1:17 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

I've got their and found some denies that are inherited when I look at
them they deny nothing. 
 
Where shall I go from here.

Thanks 


Dan

-----Original Message-----
From: Michael B. Smith [mailto:michael@xxxxxxxxxx]
Sent: Monday, January 03, 2005 7:27 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

I reported that as a bug in ADSIedit quite some time ago. It still
doesn't appear that they've fixed it.

Anyway, open up everything on the LEFT pane of the ADSIedit console.
When you do your right-click on the object, do that in the LEFT pane,
not the right. 

-----Original Message-----
From: Dan Grube [mailto:DanGrube@xxxxxxxxxxxxxxx]
Sent: Thursday, December 30, 2004 2:53 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

Sorry about falling off the face of the earth of course I doubt I was
missed but I got pulled for more pressing things have located the DN
can't look its properties it gives acts as if I've made no request. Made
a test see if I could rename it then rename it back and it responded
'Folder or one of its children has one of its property sheets up. Please
close the property before continuing this action.'

I can tell you're leading to the point of enlightenment and I truly
appreciate it, and your patience, thanks again.

dan

-----Original Message-----
From: Michael B. Smith [mailto:michael@xxxxxxxxxx]
Sent: Wednesday, December 08, 2004 12:28 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

This is a sample DN for GALs. Your's will be fairly similar:

CN=All Global Address Lists,CN=Address Lists Container,CN=Blue Ridge
Internetworks,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=brnets,DC=local 

-----Original Message-----
From: Dan Grube [mailto:DanGrube@xxxxxxxxxxxxxxx]
Sent: Wednesday, December 08, 2004 1:30 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

From within ADSIedit I look in CN=Microsoft Exchange System Objects and
could find all my Offline Address Lists but none of my Global Address
List. Should I be looking somewhere else?

By the way I really appreciate your time and patience.

Thanks

Dan

-----Original Message-----
From: Michael B. Smith [mailto:michael@xxxxxxxxxx]
Sent: Tuesday, December 07, 2004 5:58 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

Time to pull out ADSIedit. You should be able to override the security
using that tool.

Get that fixed first...

-----Original Message-----
From: Dan Grube [mailto:DanGrube@xxxxxxxxxxxxxxx]
Sent: Tuesday, December 07, 2004 8:03 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

I did create AllowGAL gave it FC of "Default Global Address List" then
did (stupidly) deny FC with everyone and Authenticated Users without
giving the thought the Deny overrides Enable.

I am unable to even see "Default Global Address List" from within system
manager to change it even when I log in with an account with AllowGAL
(which is and expected). Having said that, everyone can still view the
contents of the "Default Global Address List". Even though I can't see I
also cannot create a new one because it already exists obviously.

It's a bit of a pickle I've got myself in...

Could use some help, actually I think I could use a lot.

Thanks for your time and consideration

Dan

-----Original Message-----
From: Michael B. Smith [mailto:michael@xxxxxxxxxx]
Sent: Tuesday, December 07, 2004 3:12 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

It's all about permissions.

You already have a GAL. The "Default Global Address List". You've likely
removed the "everyone" and "authenticated users" ACEs from it's ACL. 

Create a group "AllowGAL" or something. Give it FC (I can give you the
limited rights actually required, but FC is just easier) in the Default
GAL's ACL. 

That's really all there is to it. Now, if you've done Deny's on
"Everyone" and/or "Authenticated Users", it gets much harder.

-----Original Message-----
From: Dan Grube [mailto:DanGrube@xxxxxxxxxxxxxxx]
Sent: Tuesday, December 07, 2004 5:48 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

I'm unable to get the GAL that actually has everything in it to only be
seen by the few that require it, regardless of how I set the
permissions.

After that it is my understanding I make multiple GALs for each OUs with
the appropriate objects to be viewed and the first GAL an OU has access
it the default OU for that OU.

But making the Complete GAL available to the few who require it has me
stumped.

Thank you for your time and consideration

Dan

-----Original Message-----
From: Michael B. Smith [mailto:michael@xxxxxxxxxx]
Sent: Tuesday, December 07, 2004 1:40 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Attempting to hide Global Address List and
give each ou their own

http://www.MSExchange.org/

It works fine. I've got lots of customer depending on the functionality
every day.

You need to tell us more to help you. 

-----Original Message-----
From: Dan Grube [mailto:DanGrube@xxxxxxxxxxxxxxx]
Sent: Tuesday, December 07, 2004 4:35 PM
To: [ExchangeList]
Subject: [exchangelist] Attempting to hide Global Address List and give
each ou their own

http://www.MSExchange.org/

Hi All,

I posted this a few days ago and got no response on how to do it or the
article "Shared Hosting with Exchange 2003 (Part 2)" has problems or it
works fine and I'm missing the boat. This is a very big issue where I'm
at and I hoping I can get some assistance.

Thanks for your time and consideration.

Dan


Subject: [exchangelist] attempting to hide Global Address List

I have used the article Shared Hosting with Exchange 2003 (Part 2) to
hide my global address List but I have had no success. I am able to
prevent one OU from Viewing another OU Address List.

But as far as Creating a GAL for Each OU and hiding the true GAL from
certain OUs I have had no luck.

Thanks for the time and consideration.

Dan

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
Dangrube@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
michael@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
Dangrube@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
michael@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
Dangrube@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
michael@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
Dangrube@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
michael@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
Dangrube@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
michael@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
Dangrube@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
michael@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
Dangrube@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
michael@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx


Other related posts: