Solved

New Users not in Global Address List

Posted on 2008-06-24
20
8,254 Views
Last Modified: 2012-01-05
We recently upgraded from Microsoft Exchange 2003 to Exchange 2007.  After migrating all of the mailboxes and public folders we successfully brought the Exchange 2003 server offline.

The problem started when we needed to add new users to the system.  I have performed some troubleshooting and here is what I found.  

1. If user's AD account is added through Active Directory Users and Computers and the users mailbox is setup using the Exchange 2007 Management Console the user does not show up in the Global Address List.  
2. If the user's AD account and Mailbox are created through the Exchange Management Console the user is successfully added to the Global Address List.  

The Exchange 2003 Management Tools have been removed from Active Directory Users and Computers on the machine that we used for the tests.  

On another note, we needed to bring the Public Folder Store on our Exchange 2003 server because Free/Busy Data was not being shown on Outlook 2003 Clients. The Message Store is still offline.  
0
Comment
Question by:netmaster3620
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 9
  • 7
  • 2
  • +2
20 Comments
 
LVL 17

Expert Comment

by:Andres Perales
ID: 21857261
Population of the GAL is not alway instantaneous can take up to 15 minutes for some accounts to populate...just as a guideline...so are you saying accounts created using step 1 above don't ever get populated?
0
 

Author Comment

by:netmaster3620
ID: 21857364
Yes, that is definetly the case.  I created 3 accounts yesterday.  

The following test accounts were added using ADUC.  The mailboxes were added using Ex2K7 Management Console

Linus Torvalds
Bill Gates

The following user's AD account and Mailbox was added using the Ex2K7 Management Console.  

Steven Jobs

Steve's account showed up in the GAL immediately while the other accounts are still not showing up.  We originally noticed this after some accounts that we created earlier in the week did not show up.  They are still not there.  

We would use the Ex2K7 Management Console to create the accounts however we use a template and users cannot be created from templates in the Ex2K7 Management Console.  This feature is only available in the Ex2K7 Management Shell.  There are also many other AD options that are not available through this tool.  
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21857611
Do you have teh OAB, Mailbox Roels etc pointed at the correct domain controllers?
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21857668
By any chance also, are the users "Hidden"?
0
 
LVL 17

Expert Comment

by:Andres Perales
ID: 21857696
Pointed to the domain controller acting as the GC
0
 

Author Comment

by:netmaster3620
ID: 21857936
Q: By any chance also, are the users "Hidden"?
A: The users are not hidden.  

Q: Do you have teh OAB, Mailbox Roels etc pointed at the correct domain controllers?
 Where exactly would we find this information.  When we setup Exchange 2007 we originally had it coexisting with Exchange 2003.  Once the migration was complete we reassigned the recipient update service, removed public folder replication, and reconfigured the send connectors so they no longer funneled mail through the Exchange 2003 server.  I am almost 100% positive that the 2007 server is pointing towards one of our GC DC's I am unsure as to where to go and look.  
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21858053
Open the Management Console
Expand Client Settings
Select Mailbox
Right click on the Server - Select Properties.
Click the System Settings Tab
0
 

Author Comment

by:netmaster3620
ID: 21858093
There are 3 Domain Controllers listed and one of which is the old Exchange server.  Under the Global Catalog Servers there are 2 servers listed and one of the is also the old exchange server.  That system is till acting as a AD DC.  
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21858204
Any replication issues among the 3 servers?
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21858323
Are there any errors in the event logs?
0
 

Author Comment

by:netmaster3620
ID: 21858994
I have done some additional troubleshooting and I found some issues.  

1. I noticed that I was unable to edit the "Default Policy" under Organization Configuration > Hub Transport > E-mail Address Policies.  To correct this I went to the Exchange 2003 server and browsed to Recipients > Recipient Policies.  I right clicked on the default policy and Default Policy and selected Change Property Pages.  On the screen that appeared I unchecked Mailbox Manager Settings and clicked OK.  

This allowed me to run the following command:
Set-EmailAddressPolicy "Default Policy" -IncludedRecipients AllRecipients

Once this was done I applied the policy to all of the mailboxes.  Most of the users showed up in the Global Address List. In order to correct the accounts that did not still show up I disabled their mailbox, cleaned the database, and then re-connected the mailbox.  

2. Here is where we are still having issues.  In order to ensure that everything was working properly I created a new account names ITS Geek through ADUC.  I then added the mailbox using the Exch2K7 Management Console, waited a while and then looked to see if the user was listed in the GAL.  Unfortunately the user was not.

I then had to apply the Default Policy to all of the mailboxes, remove the ITS Geek mailbox, clean the SG Database, and re-connect the mailbox.  The user was then in the Global Address List.  

IT looks like the Default Policy is not being applied when the mailboxes are created for existing users.  

Is there any way to fix this?  I am assuming that there must be a setting somewhere that will correct this issue.  

Thank you in advance for your assistance.  
0
 

Author Comment

by:netmaster3620
ID: 21859060
To answer your questions.  

Q: Any replication issues among the 3 servers?

Replication between the systems is working fine.  There are no replication errors in the event logs that would indicate a problem with replication.  



0
 

Author Comment

by:netmaster3620
ID: 21859608
Update on Troubleshooting.  

Here are the steps that I need to be performed if a user is added using ADUC.  

1. Create the account using Active Directory Users and Computers.  
2. Wait for replication or force replication to occur.  
3. Create a New Mailbox in the Exch2k7 Management Console.  
3. Wait for replication or force replication to occur.  
4. Disable the users mailbox.  
5. Clean the Storage Group Database.  
6. Re-Connect the users Mailbox

If these steps are followed the user will be listed in the Global Address List.  

Steps 4 - 6 should not have to be performed in order for the user to show up in the GAL.  

Any ideas as to why this is occurring?

Thank you,

0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21859924
What do you mean by  Clean the Storage Group Database? Are you running eseutil?

There should be no reason you would have to do any of the steps 4-6.
0
 

Author Comment

by:netmaster3620
ID: 21859976
I run the following command so that the disabled mailboxes will show up under Disconnected Mailboxes.
Clean-MailboxDatabase "Mailbox-Database"

This way we do not have to wait for the scheduled cleanups.  

0
 
LVL 3

Assisted Solution

by:Rikketyrik
Rikketyrik earned 250 total points
ID: 21860112
There may be a permisions issue at play here. Anyone else have some ideas on this?
0
 

Author Comment

by:netmaster3620
ID: 21867384
I have performed additional troubleshooting.  

I wanted to make sure that this issue was not being caused by the Offline Address book in Exchange 2007.  I saw lots of references to this issue when I was scouring the web for solutions.  

I modified the Offline Address book and Enabled Web Based Distribution alongside Public Folder Distribution which was already enabled.  I then Updated the Offline Address Book.  

Once this was done I created a user in A.D.U.C and created a new mailbox and attached it to that user in the Exch2k7 Management Console.

I still encountered the same issue.  

If I remove the mailbox and clean the database I am not seeing it in the list of Disconnected Mailboxes.  I then have to Add a new mailbox to the user account a second time and the user shows up un the Global Address List.  
0
 

Accepted Solution

by:
netmaster3620 earned 0 total points
ID: 21874800
I have found the cause of the problem.  

During the troubleshooting process I discovered that the Global Address List had not been upgraded.  I obtained this information by issuing the following command in the Exchange Management Shell.  

Get-GlobalAddressList | Format-List Name,*RecipientFilter*,ExchangeVersion

This command lists detailed information on the Global Address Book.  To view information on all of the other address books on your Exchange 2007 server issue the following command:

Get-AddressList | Format-List Name,*RecipientFilter*,ExchangeVersion

Both of the above commands will display the following Address Book attributes:

Name
RecipientFilter
LdapRecipientFilter
LastUpdatedRecipientFilter
RecipientFilterApplied
RecipientFilterType
ExchangeVersion

If the RecipientFilterType is set to Legacy that means that the Address book has not been upgraded to the Exchange 2007 format.  

Below is the command that I ran to correct this issue:

Set-GlobalAddressList "Default Global Address List" -RecipientFilter {(Alias -ne $null -and (ObjectClass -eq 'user' -or ObjectClass -eq 'contact' -or ObjectClass -eq 'msExchSystemMailbox' -or ObjectClass -eq 'msExchDynamicDistributionList' -or ObjectClass -eq 'group' -or ObjectClass -eq 'publicFolder'))}

While all of our other Address Books had been upgraded, you will need to ensure that you upgrade all of the Address Books on your Exchange 2007 server.

For additional information please read the following article.

http://msexchangeteam.com/archive/2007/01/11/432158.aspx








0
 
LVL 1

Expert Comment

by:koollkidd
ID: 32685591
I have been searching for a solution to this problem for quite a number of hours now and this post is a blessing!
Fantastic solution.
 
Chris,
0
 

Expert Comment

by:advantagetech
ID: 37382034
this is the command i had to check the versions:

Get-AddressList | Format-List Name,*RecipientFilter*,ExchangeVersion
Get-GlobalAddressList | Format-List Name,*RecipientFilter*,ExchangeVersion
Get-EmailAddressPolicy | where {$_.RecipientFilterType -eq “Legacy”}

then this to upgrade Global:

Set-GlobalAddressList “Default Global Address List” -RecipientFilter {(Alias -ne $null -and (ObjectClass -eq ‘user’ -or ObjectClass -eq ‘contact’ -or ObjectClass -eq ‘msExchSystemMailbox’ -or ObjectClass -eq ‘msExchDynamicDistributionList’ -or ObjectClass -eq ‘group’ -or ObjectClass -eq ‘publicFolder’))}



0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question