Solved

New Users not in Global Address List

Posted on 2008-06-24
20
8,241 Views
Last Modified: 2012-01-05
We recently upgraded from Microsoft Exchange 2003 to Exchange 2007.  After migrating all of the mailboxes and public folders we successfully brought the Exchange 2003 server offline.

The problem started when we needed to add new users to the system.  I have performed some troubleshooting and here is what I found.  

1. If user's AD account is added through Active Directory Users and Computers and the users mailbox is setup using the Exchange 2007 Management Console the user does not show up in the Global Address List.  
2. If the user's AD account and Mailbox are created through the Exchange Management Console the user is successfully added to the Global Address List.  

The Exchange 2003 Management Tools have been removed from Active Directory Users and Computers on the machine that we used for the tests.  

On another note, we needed to bring the Public Folder Store on our Exchange 2003 server because Free/Busy Data was not being shown on Outlook 2003 Clients. The Message Store is still offline.  
0
Comment
Question by:netmaster3620
  • 9
  • 7
  • 2
  • +2
20 Comments
 
LVL 17

Expert Comment

by:Andres Perales
ID: 21857261
Population of the GAL is not alway instantaneous can take up to 15 minutes for some accounts to populate...just as a guideline...so are you saying accounts created using step 1 above don't ever get populated?
0
 

Author Comment

by:netmaster3620
ID: 21857364
Yes, that is definetly the case.  I created 3 accounts yesterday.  

The following test accounts were added using ADUC.  The mailboxes were added using Ex2K7 Management Console

Linus Torvalds
Bill Gates

The following user's AD account and Mailbox was added using the Ex2K7 Management Console.  

Steven Jobs

Steve's account showed up in the GAL immediately while the other accounts are still not showing up.  We originally noticed this after some accounts that we created earlier in the week did not show up.  They are still not there.  

We would use the Ex2K7 Management Console to create the accounts however we use a template and users cannot be created from templates in the Ex2K7 Management Console.  This feature is only available in the Ex2K7 Management Shell.  There are also many other AD options that are not available through this tool.  
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21857611
Do you have teh OAB, Mailbox Roels etc pointed at the correct domain controllers?
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21857668
By any chance also, are the users "Hidden"?
0
 
LVL 17

Expert Comment

by:Andres Perales
ID: 21857696
Pointed to the domain controller acting as the GC
0
 

Author Comment

by:netmaster3620
ID: 21857936
Q: By any chance also, are the users "Hidden"?
A: The users are not hidden.  

Q: Do you have teh OAB, Mailbox Roels etc pointed at the correct domain controllers?
 Where exactly would we find this information.  When we setup Exchange 2007 we originally had it coexisting with Exchange 2003.  Once the migration was complete we reassigned the recipient update service, removed public folder replication, and reconfigured the send connectors so they no longer funneled mail through the Exchange 2003 server.  I am almost 100% positive that the 2007 server is pointing towards one of our GC DC's I am unsure as to where to go and look.  
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21858053
Open the Management Console
Expand Client Settings
Select Mailbox
Right click on the Server - Select Properties.
Click the System Settings Tab
0
 

Author Comment

by:netmaster3620
ID: 21858093
There are 3 Domain Controllers listed and one of which is the old Exchange server.  Under the Global Catalog Servers there are 2 servers listed and one of the is also the old exchange server.  That system is till acting as a AD DC.  
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21858204
Any replication issues among the 3 servers?
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21858323
Are there any errors in the event logs?
0
Are end users causing IT problems again?

You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

 

Author Comment

by:netmaster3620
ID: 21858994
I have done some additional troubleshooting and I found some issues.  

1. I noticed that I was unable to edit the "Default Policy" under Organization Configuration > Hub Transport > E-mail Address Policies.  To correct this I went to the Exchange 2003 server and browsed to Recipients > Recipient Policies.  I right clicked on the default policy and Default Policy and selected Change Property Pages.  On the screen that appeared I unchecked Mailbox Manager Settings and clicked OK.  

This allowed me to run the following command:
Set-EmailAddressPolicy "Default Policy" -IncludedRecipients AllRecipients

Once this was done I applied the policy to all of the mailboxes.  Most of the users showed up in the Global Address List. In order to correct the accounts that did not still show up I disabled their mailbox, cleaned the database, and then re-connected the mailbox.  

2. Here is where we are still having issues.  In order to ensure that everything was working properly I created a new account names ITS Geek through ADUC.  I then added the mailbox using the Exch2K7 Management Console, waited a while and then looked to see if the user was listed in the GAL.  Unfortunately the user was not.

I then had to apply the Default Policy to all of the mailboxes, remove the ITS Geek mailbox, clean the SG Database, and re-connect the mailbox.  The user was then in the Global Address List.  

IT looks like the Default Policy is not being applied when the mailboxes are created for existing users.  

Is there any way to fix this?  I am assuming that there must be a setting somewhere that will correct this issue.  

Thank you in advance for your assistance.  
0
 

Author Comment

by:netmaster3620
ID: 21859060
To answer your questions.  

Q: Any replication issues among the 3 servers?

Replication between the systems is working fine.  There are no replication errors in the event logs that would indicate a problem with replication.  



0
 

Author Comment

by:netmaster3620
ID: 21859608
Update on Troubleshooting.  

Here are the steps that I need to be performed if a user is added using ADUC.  

1. Create the account using Active Directory Users and Computers.  
2. Wait for replication or force replication to occur.  
3. Create a New Mailbox in the Exch2k7 Management Console.  
3. Wait for replication or force replication to occur.  
4. Disable the users mailbox.  
5. Clean the Storage Group Database.  
6. Re-Connect the users Mailbox

If these steps are followed the user will be listed in the Global Address List.  

Steps 4 - 6 should not have to be performed in order for the user to show up in the GAL.  

Any ideas as to why this is occurring?

Thank you,

0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21859924
What do you mean by  Clean the Storage Group Database? Are you running eseutil?

There should be no reason you would have to do any of the steps 4-6.
0
 

Author Comment

by:netmaster3620
ID: 21859976
I run the following command so that the disabled mailboxes will show up under Disconnected Mailboxes.
Clean-MailboxDatabase "Mailbox-Database"

This way we do not have to wait for the scheduled cleanups.  

0
 
LVL 3

Assisted Solution

by:Rikketyrik
Rikketyrik earned 250 total points
ID: 21860112
There may be a permisions issue at play here. Anyone else have some ideas on this?
0
 

Author Comment

by:netmaster3620
ID: 21867384
I have performed additional troubleshooting.  

I wanted to make sure that this issue was not being caused by the Offline Address book in Exchange 2007.  I saw lots of references to this issue when I was scouring the web for solutions.  

I modified the Offline Address book and Enabled Web Based Distribution alongside Public Folder Distribution which was already enabled.  I then Updated the Offline Address Book.  

Once this was done I created a user in A.D.U.C and created a new mailbox and attached it to that user in the Exch2k7 Management Console.

I still encountered the same issue.  

If I remove the mailbox and clean the database I am not seeing it in the list of Disconnected Mailboxes.  I then have to Add a new mailbox to the user account a second time and the user shows up un the Global Address List.  
0
 

Accepted Solution

by:
netmaster3620 earned 0 total points
ID: 21874800
I have found the cause of the problem.  

During the troubleshooting process I discovered that the Global Address List had not been upgraded.  I obtained this information by issuing the following command in the Exchange Management Shell.  

Get-GlobalAddressList | Format-List Name,*RecipientFilter*,ExchangeVersion

This command lists detailed information on the Global Address Book.  To view information on all of the other address books on your Exchange 2007 server issue the following command:

Get-AddressList | Format-List Name,*RecipientFilter*,ExchangeVersion

Both of the above commands will display the following Address Book attributes:

Name
RecipientFilter
LdapRecipientFilter
LastUpdatedRecipientFilter
RecipientFilterApplied
RecipientFilterType
ExchangeVersion

If the RecipientFilterType is set to Legacy that means that the Address book has not been upgraded to the Exchange 2007 format.  

Below is the command that I ran to correct this issue:

Set-GlobalAddressList "Default Global Address List" -RecipientFilter {(Alias -ne $null -and (ObjectClass -eq 'user' -or ObjectClass -eq 'contact' -or ObjectClass -eq 'msExchSystemMailbox' -or ObjectClass -eq 'msExchDynamicDistributionList' -or ObjectClass -eq 'group' -or ObjectClass -eq 'publicFolder'))}

While all of our other Address Books had been upgraded, you will need to ensure that you upgrade all of the Address Books on your Exchange 2007 server.

For additional information please read the following article.

http://msexchangeteam.com/archive/2007/01/11/432158.aspx








0
 
LVL 1

Expert Comment

by:koollkidd
ID: 32685591
I have been searching for a solution to this problem for quite a number of hours now and this post is a blessing!
Fantastic solution.
 
Chris,
0
 

Expert Comment

by:advantagetech
ID: 37382034
this is the command i had to check the versions:

Get-AddressList | Format-List Name,*RecipientFilter*,ExchangeVersion
Get-GlobalAddressList | Format-List Name,*RecipientFilter*,ExchangeVersion
Get-EmailAddressPolicy | where {$_.RecipientFilterType -eq “Legacy”}

then this to upgrade Global:

Set-GlobalAddressList “Default Global Address List” -RecipientFilter {(Alias -ne $null -and (ObjectClass -eq ‘user’ -or ObjectClass -eq ‘contact’ -or ObjectClass -eq ‘msExchSystemMailbox’ -or ObjectClass -eq ‘msExchDynamicDistributionList’ -or ObjectClass -eq ‘group’ -or ObjectClass -eq ‘publicFolder’))}



0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Resolve DNS query failed errors for Exchange
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now