Solved

Exchange - Mail Enabled Group with Non-Mail Enabled User Accounts Appear in GAL

Posted on 2012-04-11
5
854 Views
Last Modified: 2012-04-16
Hello Experts,
I'm sure the answer to this question is all around ~ I just cant find the right way to search for it correctly. Here's what I got:

Background:
We use a mail-enabled security group in active directory to e-mail the group AND for access to a file share. This group has a few user accounts which are not mail enabled, but they still need access to the file shares.

Problem:
In Outlook, when an email is sent to the group, NDR's are sent back because some of the accounts are without mailboxes.

Why? These non-mail-enabled accounts don't appear in the GAL by themselves, so I'm curious why they still appear in the GAL under the group? I peeked around ADSI, but couldnt see a specific setting for this. ShowInAddressBook is clear.

Thanks for your help!
0
Comment
Question by:ottobock
  • 3
  • 2
5 Comments
 
LVL 42

Expert Comment

by:Amit
ID: 37834824
Can you post the screeshot, what you are seeing GAL
Also read this
http://blog.imanami.com/blog/bid/62565/Distribution-group-or-mail-enabled-security-group
0
 
LVL 7

Author Comment

by:ottobock
ID: 37834877
I dont really want to post a screenshot and it will include user information, but here's another attempt:

Security Group (mail-enabled): Office_Group
Generic User Account without a mailbox added.

When I open Outlook > GAL > I can't find user with no Mailbox. (as should be)

But in the GAL, I find Office_Group, and if I send an email to that group, I get a bounceback for the user without a mailbox.

Make sense? Again, the group is for e-mail AND for access to local file shares. That is why there are a couple users with no mailbox, but still need access to the share.

But one would figure the users without mailboxes (without exchange attributes) would not appear in the GAL in anyway...
0
 
LVL 42

Expert Comment

by:Amit
ID: 37837359
A) If user doesn't have mailbox and is part of security group, email bounce back is normal.
B) User with mailbox only will show up in the GAL.
0
 
LVL 7

Author Comment

by:ottobock
ID: 37837413
OK - but why its it normal? It shouldn't be normal.
Is there a way to prevent the users without mailboxes to appear when I send an email to the group?

Of course, I could make a new distribution group just for the email, and separate the security group from the dirstribution group, but it just sounds dumb that Outlook/Exchange should even be attempting to send email to users without email within the same organization...
0
 
LVL 42

Accepted Solution

by:
Amit earned 500 total points
ID: 37837447
Outlook is sending email to a DL in this case, then Exchange expands the DL and sends the email, Exchange will not check if user have a mailbox or not, that is why security groups are not recommended for emails, better to use Distribution groups.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people use more than one email account and so it becomes difficult for them to manage them when they use separate accounts,  so, in this article, I have shared an easy way to add Other Mail Accounts in your Google Inbox. It helps to combine all…
In this step by step procedure, you will come to know the details of creating an Outlook meeting in 2007, 2010, 2013 & 2016.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question