Hello Tony -
Weren't you around for this argument a few months ago on the Exchange MVP list? J I think it's a crock, personally. But we were told that: a) too many people were shooting themselves in the foot (that is, damaging their Exchange environment) by attempting to do this, and b) the MSFT Exchange Hosting tools include this capability and therefore people shouldn't be doing it manually. Neither of those are defensible reasons in my mind. I could go on and on as to why that's my opinion, but you didn't ask for me to write a white paper. J Thanks, M From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Thursday, January 18, 2007 2:33 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Different default GALs for different groups Hi Michael Any idea why Microsoft no longer supports this method? Tony ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Friday, 19 January 2007 6:32 a.m. To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Different default GALs for different groups It may interest you to know that MSFT doesn't really support this anymore. They've pulled the KB articles on it that used to exist. Regardless, it still works if you set everything up properly. 1) remove the "Everyone" and "Authenticated Users" groups from the address list that the Default GAL refers to 2) remove the "Everyone" and "Authenticated Users" groups from the Default GAL 3) deny the specific group access to the Default GAL 4) create a new AL 5) remove the "Everyone" and "Authenticated Users" groups from the new AL 6) give the group FC permissions to the new AL 7) create a new GAL referring to the new AL 8) remove the "Everyone" and "Authenticated Users" groups from the new GAL 9) give the group FC permissions to the new GAL I think that's all the steps. This does have side effects - among those, it removes anonymous access to your GAL. Note that if you intend to use Outlook in cached mode, you have to do the similar steps for an OAL too. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jonathan Watts Sent: Thursday, January 18, 2007 11:32 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Different default GALs for different groups Hey list I have been battling with the following issue for what feels like an age, but I can't seem to get it so I'm hoping someone here could provide a bit of inspiration for me: As we are a secondary school (K-12 equivalent), I would like members of a particular group (namely staff) to have a different default GAL than another group (students) when opening Outlook. I am really stuck with this would appreciate any help I can get. Our environment is W2K3, Exc2K3 and Outlook2K3. Thanks in advance Jon Watts St Catherine's School
