GAL permissions problem

2001-11-16 Thread Jackson, Cathy M


Hi folks,

We've got an Exchange organisation here with 2 sites, each with a server running 
Exchange 5.5 SP4.  There are 2 domains, the boundaries of
which are the same as the sites, connected by a 2-way trust.  Connectivity between the 
sites/domains is very good (lan speeds), we are set
up this way for organisational/historical/political reasons, not technical ones. There 
is a site connector between the sites.

We have a problem in one of the 2 sites, in that most users  found one day that they 
could not see the GAL.  Domain admins in this site
could.  This site runs in an NT4 domain.  There were no GAL problems visible in the 
connected site.  An additional problem discovered
slightly later  is that the only users in the second site who could see the calendars 
of users in the site with problems were those logged
in to their domain with admin rights.  Users in this second site are in a W2K 
native-mode domain.  

I do not directly administer either the Exchange server or the NT domain controllers 
in the site with the GAL problem.  I'm assured that
this happened suddenly without anyone making any changes, I'm not sure whether to take 
my colleages' word for this!  We've not seen any
problem with the mail flow between the sites, nor have any non-Exchange problems been 
reported, as far as I know.  Directory replication
between the sites appears fine.
Anyone got any ideas where I should start looking?  

Initial research on Technet suggests problems with Address Book Views (Q173760, 
Q248398), but although there is an ABV set up, this has
never been used.  We have checked the rights on this and no-one has been explicitly 
given rights. In addition, we are not seeing the
abnormal CPU ultilizations associated with ABV storms.


Cathy Jackson
Shefield Hallam University, UK



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: GAL permissions problem

2001-11-16 Thread Ryan, Ben

Have search permissions been set by the administrator in the Exchange Server
Administrator program? Do they get an error message when they try to access
the GAL? The search control in Exchange Server 5.5 is used to limit GAL
access, and after being set by an administrator, the recipients in the GAL
may become unavailable. 

If the Search permissions were set in error, then removing the Search
permissions in the Exchange Server Administrator program will correct the
look of the global address list. 

For additional information on how to check search permissions, please see
the following articles in the Microsoft Knowledge Base: 

Q182902 XADM: How To Setup Container Level Search Control 

Q173760 XADM: User's GAL Displayed Differently Based on Search Control 


Ben


-Original Message-
From: Jackson, Cathy M [mailto:[EMAIL PROTECTED]]
Sent: 16 November 2001 11:33
To: Exchange Discussions
Subject: GAL permissions problem



Hi folks,

We've got an Exchange organisation here with 2 sites, each with a server
running Exchange 5.5 SP4.  There are 2 domains, the boundaries of
which are the same as the sites, connected by a 2-way trust.  Connectivity
between the sites/domains is very good (lan speeds), we are set
up this way for organisational/historical/political reasons, not technical
ones. There is a site connector between the sites.

We have a problem in one of the 2 sites, in that most users  found one day
that they could not see the GAL.  Domain admins in this site
could.  This site runs in an NT4 domain.  There were no GAL problems visible
in the connected site.  An additional problem discovered
slightly later  is that the only users in the second site who could see the
calendars of users in the site with problems were those logged
in to their domain with admin rights.  Users in this second site are in a
W2K native-mode domain.  

I do not directly administer either the Exchange server or the NT domain
controllers in the site with the GAL problem.  I'm assured that
this happened suddenly without anyone making any changes, I'm not sure
whether to take my colleages' word for this!  We've not seen any
problem with the mail flow between the sites, nor have any non-Exchange
problems been reported, as far as I know.  Directory replication
between the sites appears fine.
Anyone got any ideas where I should start looking?  

Initial research on Technet suggests problems with Address Book Views
(Q173760, Q248398), but although there is an ABV set up, this has
never been used.  We have checked the rights on this and no-one has been
explicitly given rights. In addition, we are not seeing the
abnormal CPU ultilizations associated with ABV storms.


Cathy Jackson
Shefield Hallam University, UK



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]