Announcement

Collapse
No announcement yet.

Restrict Users from Changing Global Address List

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restrict Users from Changing Global Address List

    Hi,

    I am currently having security issues where our users can add/delete users from Global Address List from their Outlook address book. I guess it wouldn't be a big deal if they can only do it for 'Distribution Groups', but I also discovered that they can also do it with 'Security Groups'.

    How can I restrict my users from doing changes in the Global Adress List and just give the read permissions? We have Exchange 2003 Enterprise and Outlook 2003.

    Thank you for all the help!

  • #2
    Re: Restrict Users from Changing Global Address List

    You need to look at what permissions the users have on the groups. Sounds like the users are members of a group they shouldn't be. Track back through the groups and memberships to see what it is. It could be something like Everyone is a member of another group that is a member of Domain Admins.

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: Restrict Users from Changing Global Address List

      Sembee,

      Pardon me for not replying right away. Do I set the account rights on the AD or on the Default Global Address List in Exchange?

      Comment


      • #4
        Re: Restrict Users from Changing Global Address List

        seems that users are member of group that thet shouldnt be..

        have you addded domain users groups in domain admin groups..

        Rgds

        Comment


        • #5
          Re: Restrict Users from Changing Global Address List

          You are looking at permissions on the groups themselves, not the GAL. Don't touch the GAL permissions.

          Simon.
          --
          Simon Butler
          Exchange MVP

          Blog: http://blog.sembee.co.uk/
          More Exchange Content: http://exchange.sembee.info/
          Exchange Resources List: http://exbpa.com/
          In the UK? Hire me: http://www.sembee.co.uk/

          Sembee is a registered trademark, used here with permission.

          Comment

          Working...
          X