It may interest you to know that MSFT doesn't really support this anymore. They've pulled the KB articles on it that used to exist.
Regardless, it still works if you set everything up properly. 1) remove the "Everyone" and "Authenticated Users" groups from the address list that the Default GAL refers to 2) remove the "Everyone" and "Authenticated Users" groups from the Default GAL 3) deny the specific group access to the Default GAL 4) create a new AL 5) remove the "Everyone" and "Authenticated Users" groups from the new AL 6) give the group FC permissions to the new AL 7) create a new GAL referring to the new AL 8) remove the "Everyone" and "Authenticated Users" groups from the new GAL 9) give the group FC permissions to the new GAL I think that's all the steps. This does have side effects - among those, it removes anonymous access to your GAL. Note that if you intend to use Outlook in cached mode, you have to do the similar steps for an OAL too. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jonathan Watts Sent: Thursday, January 18, 2007 11:32 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Different default GALs for different groups Hey list I have been battling with the following issue for what feels like an age, but I can't seem to get it so I'm hoping someone here could provide a bit of inspiration for me: As we are a secondary school (K-12 equivalent), I would like members of a particular group (namely staff) to have a different default GAL than another group (students) when opening Outlook. I am really stuck with this would appreciate any help I can get. Our environment is W2K3, Exc2K3 and Outlook2K3. Thanks in advance Jon Watts St Catherine's School
