Solved

GAL Update on Exchange 2k3 by Administrative Aassistant

Posted on 2007-11-21
16
683 Views
Last Modified: 2008-02-01
Hello Experts,

I just spent the last 5 hrs of the day looking for a way, within Windows/Exchange, to enable a couple of users in my organization to update the GAL. As many of you know, it's very inefficient when users have to go through the administrators to make GAL information changes.

I'm very aware of the various 3rd party tools available that would enable select users to update GAL information for the entire organization. I even attempted to use the GALMOD32 utility, but no luck.  I made sure to adjust the appropriate permissions and delegate control at the OU level as advised by Microsoft KB 272198. I was able to get it working to where the domain user is able to modify his/her own GAL information, but not everyone else's. I'm very surprised that Microsoft doesn't have a utility that allows this type of administration. I was expecting to come across a type of updated GALMOD32 utility to address this concern in Exchange 2k3. Perhaps, I didn't look hard enough and didn't find this utility. I'm a little hesitant about purchasing a 3rd party application for this task not because of the money, but because of compatibility and potential issues caused by the application and Exchange. Anyway, I would appreciate if someone out there has come across a better GALMOD32 utility...

Thanks,
0
Comment
Question by:bndit
  • 8
  • 5
  • 3
16 Comments
 
LVL 11

Assisted Solution

by:bsharath
bsharath earned 100 total points
ID: 20332346
Hi,
Download see if this works "IMIGALModifyR.exe"

Do you want to give all users the ability to change all or just some fields in the GAl
0
 
LVL 2

Author Comment

by:bndit
ID: 20332367
Hi bsharath,

I would like for these users to change all of the fields in the GAL. I will try your suggestion and let you know what I find out.
0
 
LVL 2

Author Comment

by:bndit
ID: 20332374
Could you provide the link to download IMIGALModifyR.exe? - Thx
0
 
LVL 11

Expert Comment

by:bsharath
ID: 20332378
0
 
LVL 11

Expert Comment

by:bsharath
ID: 20332380
Its always better that you dont give full access to them.The title,designation all such things has to be editable by the Admin or the HR.
0
 
LVL 2

Author Comment

by:bndit
ID: 20332433
Hi bsharah,

Thx for the utility suggestion. I just tried it. The GUI brings back memories of 5.5...when I read the product description, there's no mention of Exchange 2k3 support...again, I'm skeptical about potential data corruption even the utility seems to work.
0
 
LVL 11

Expert Comment

by:bsharath
ID: 20332438
Even we have exchange 2003 but seems to work fine with me...
0
 
LVL 2

Author Comment

by:bndit
ID: 20332445
I didn't make any permission changes of any type...did you notice that the user being just a Domain User is able to modify mailbox limits as well? Kinda scary...
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 104

Expert Comment

by:Sembee
ID: 20333887
When it comes to GAL updates, the two I tend to suggest are rDirectory from Namescape http://www.namescape.com/  or Directory Update - http://www.directory-update.com/

You may find that Namescape's community edition is enough for you.

Simon.
0
 
LVL 2

Author Comment

by:bndit
ID: 20351588
Does anybody know what permissions I need to grant to a user (not Domain Admin only Domain User) to use the GALMOD32 utility to modify the entire GAL for everybody? - Thanks.
0
 
LVL 11

Expert Comment

by:bsharath
ID: 20354954
What are the fields that you need to update for all employers.?
If all the employees fields are going to be the same then you can select all users in ADUC and go to properties.If each individual's data is doing to differ then you use some scripts.
0
 
LVL 2

Author Comment

by:bndit
ID: 20360467
Hi bsharath,

I want all the fields for all users. I'm not sure what you mean "If all the employees fields are going to be the same...". I get the part of going to ADUC and going to properties, but then what?

Maybe this will help, suppose that I have Mary Jones and she's an executive assistant in my company. Mary Jones being only a Domain User in my domain needs to edit all fields for all users (4000+) in the GAL. How do I enable Mary Jones to be able to edit GAL fields for all users in my company using GALMOD32? What type of permissions does she need and at what level? I tried this on Mary Jones PC and I was able to only change GAL fields for Mary Jones but not for anyone else.
0
 
LVL 104

Accepted Solution

by:
Sembee earned 150 total points
ID: 20360642
Galmod is not suitable for this. It requires permissions to the actual user account as it uses the MAPI interface to the user to change the permissions. It is designed for a user to update their own settings, not for someone central to update other users. You need to look at another tool, or you are going to end up having to install Exchange management tools on to that user's machine and give them quite high rights in the domain to make the changes - which is why most AD domains do not populate the data unless a third party tool is used.

Simon.
0
 
LVL 2

Author Comment

by:bndit
ID: 20360680
Hi Simon,

Thank you for the solid answer. That's exactly what I was looking for. Understanding my situation and my goal, are there any 3rd party tool you have personally worked with that you can recommend? - Again, I was a little skeptical about working with 3rd party tools due to potential data corruption (since it was not Windows native tool).
0
 
LVL 104

Expert Comment

by:Sembee
ID: 20360697
I posted two above. They basically make calls to the OS. While not native tools, they are using the APIs and other functions that Microsoft have provided.

I have namescape on two or three sites. Takes a little while to get the permissions right, but once it is setup works very well.

Simon.
0
 
LVL 2

Author Comment

by:bndit
ID: 20360719
Thank you.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now