Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Exchange 2003 - Hide certain users from GAL, put in custom list instead

Posted on 2010-09-23
3
Medium Priority
?
778 Views
Last Modified: 2012-05-10
I have 2 groups of user accounts that need to be hidden from the GAL for housekeeping reasons, but need to be accessible by some of our staff because they are shared accounts.

The account names are sequenced, like ABCUser01, ABCUser02 etc. so it would be easy to find them via wildcarding.

I want to create custom address lists to put these accounts in, and grant access to them using security groups for the folks who need to see them.  This part I know how to do.

However, I can't hide them in the AD account GUI because they won't show in any list then.

I've seen some articles saying that you can use powershell to change an attribute on the user account to remove it from the GAL, but allow it to be published in a custom address list.

My questions are:
1. Is there an easy way to hide user accounts from the GAL but put them in a custom list?

2. If powershell or other scripted approach is the right way, can you show me how to do it?

Thank you.

John

0
Comment
Question by:jinscoe
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 12

Accepted Solution

by:
FDiskWizard earned 2000 total points
ID: 33745989
You can modify the GAL query... via ADSIEDIT.
But you need something uniquie to editify them with within the query.
You would have to add a search term to exclude. For example a specific descrition:
(!(description=ExcludeFromGAL))

See this: http://exchangeis.com/blogs/exchangeis/archive/2005/08/09/using-adsiedit-a-real-world-example.aspx

This is what the default GAL query looks like:

(&(mailnickname=*)(|(&(objectCategory=person)(objectClass=user)(!(homeMDB=*))(!(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=user)(|(homeMDB=*)(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=contact))(objectCategory=group)(objectCategory=publicFolder)(objectCategory=msExchDynamicDistributionList))(!(extensionAttribute1=CompanyName)))

I have changed before to exclude specific email domain used internally (users@domain2.com)
We had the same issue, we wanted them to show in other lists - just not the GAL.

So, we now have the below. You need to test your query! Do a results count before and after:

(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(!(homeMDB=*))(!(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=user)(|(homeMDB=*)(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=contact)(!(mail=*DOMAIN2.COM)))(objectCategory=group)(objectCategory=publicFolder)(objectCategory=msExchDynamicDistributionList) ))

For OTHER lists we added a special description and used that in the query instead of MAIL=..

let me know if you need any more info. I don't know of another way to do this..

0
 

Author Comment

by:jinscoe
ID: 33960767
l;
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Are you an Exchange administrator employed with an organization? And, have you encountered a corrupt Exchange database due to which you are not able to open its EDB file. This article will explain all the steps to repair corrupt Exchange database.
Want to know how to use Exchange Server Eseutil command? Go through this article as it gives you the know-how.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question