The nasty thing about Address Lists is that the roots of all address lists are still visible. If you want a situation where one OU does not even know that the other OU exists (as in hosting), then you can't use Address Lists. The catch 22 is that if you plan on using segregated Offline Address Lists, those are based on Address Lists. So you actually may want to set permissions to hide the roots of Address Lists.
For regular online address list needs, use segregated GALs with strict permissions. -----Original Message----- From: matt [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 14, 2002 4:53 PM To: Exchange Discussions Subject: RE: Vpn question OK thanks all had to use host files. How do I keep different OU's from seeing groups and all addresses in outlook. I do have Separate address list for each OU and and groups for each OU. I created the UPN suffixes and mailbox stores. I removed the Auth users from each's ou and added the appropiate group. I set up address list for each group and And set rules like this (|(&(objectCategory=user)(userPrincipalName=*@SmallCompany.com))(& _(objectCategory=group)(displayName=*@SmallCompany.com))) Then I set the security settings for the group (for each OU) read, list OBJ, and open address list. Set msexchquerybasedn with adsi edit so OWA sees only their address list. Created recipient policies for users and groups. OWA works fine..Outlook 2002 shows global address list just for that OU. But if you scroll down in 2002 you can view the groups from all the OU's along with list all users. This is want I want to turn off. What did I miss?? -----Original Message----- From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 14, 2002 2:24 PM To: Exchange Discussions Subject: RE: Vpn question Ohhh.. you can't access the information store. I thought you were saying that you could not start the information store. -----Original Message----- From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 14, 2002 12:57 PM To: Exchange Discussions Subject: RE: Vpn question Cause the Information Store needs to be able to connect to the domain controllers. And maybe your VPN is killing that connection? -----Original Message----- From: matt [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 14, 2002 12:50 PM To: Exchange Discussions Subject: Vpn question Set up a 2k vpn server users can log in no problem. I'm using the vpn to hook to our exchange 2k server with outlook 2000-2002. Under the properties for exchange I can have my users check their names they fill in ip address and mailbox and it checks. Then we try to launch exchange and cannot open information store. This is while we are on the vpn. Any Ideas?? Greatly appreciated _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
