Solved

Unable to Create new Global Address List

Posted on 2013-11-16
17
1,858 Views
Last Modified: 2013-11-16
Hello Experts,

We have Exchange 2010 SP3. All roles installed on a single server. I am trying to create a new  global address list but I am receiving the error.

[PS] C:\Windows\system32>New-GlobalAddresslist "ORGA" -ConditionalCustomAttribute2 "ORGA" -Incl
Recipients "AllRecipients"
WARNING: One or more global address lists were missing from the Active Directory attribute.  This is likely caused b
using legacy Exchange management tools to create global address lists.
Active Directory operation failed on dc1.domain.COM. This error is not retriable. Additional information: The nam
eference is invalid.
This may be caused by replication latency between Active Directory domain controllers.
Active directory response: 000020B5: AtrErr: DSID-03152804, #1:
    0: 000020B5: DSID-03152804, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 907ff (globalAddressList2)
    + CategoryInfo          : NotSpecified: (0:Int32) [New-GlobalAddressList], ADConstraintViolationException
    + FullyQualifiedErrorId : E9442825,Microsoft.Exchange.Management.SystemConfigurationTasks.NewGlobalAddressList

I found similar problem on Microsoft Technet.
http://social.msdn.microsoft.com/Forums/en-US/3210af54-d8b4-490f-9f5f-f4fc3209d324/newglobaladdresslist-fails-ad44a06f?forum=os_exchangeprotocols

Here is the suggestion

Open up ADSI.msc, then add in configuration.

Expand Services and right-click CN=Microsoft Exchange and select properties

Check all the GAL's listed in globalAddressList and globalAddressList2 are valid.

I did that and I found the entries as shown below
 galBut I am afraid which entry to be deleted.

I would highly appreciate any help.
0
Comment
Question by:cciedreamer
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 9
  • 5
  • 3
17 Comments
 
LVL 53

Assisted Solution

by:Will Szymkowski
Will Szymkowski earned 200 total points
ID: 39653315
The link that you have posted is correct to resolve this issue. I would suggest trying to remove the globaladdresslist2 first using powershell. If that does not work then i would use the ADSIEdit method.

Powershell syntax below..

Remove-GlobalAddressList -identity globaladdresslist2

Open in new window


Also see the link below for additional details...
http://social.technet.microsoft.com/Forums/exchange/en-US/52854856-f517-4827-b3d3-3e589a422672/exchange-2010-sp-2-cant-create-second-gal?forum=exchange2010hosters

Will.
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653451
Will that be completely safe to remove Globaladdresslist2

Shall I run that command in exchange management shell or DC power shell ?


Thanks
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653458
Just for more info couple of months of ago I upgraded exchange from SP2 to SP3

Thanks
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 37

Expert Comment

by:Mahesh
ID: 39653531
Powershell won't remove corrupted GAL entries.
We have faced same issue earlier and removed through Adsiedit only.
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653537
How do I remove from ADSIEDIT. But that would be safe to remove globaladdresslist2
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39653555
As stated in my first post, try powershell first, then use ADSIEdit if powershell does not work. Removing globaladdresslist2 is safe. Just do not delete the "default" global address list.

Will.
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653557
OK Powershell of Exchange Server or Domain Controller

Thanks
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39653559
You will need to do it in the Exchange Management Console. On the exchange server.

Will.
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653562
You will need to do it in the Exchange Management Console. On the exchange server.
Exchange Management Console or Shell ??
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39653575
Opps sorry the Exchnage management she'll is what I meant.

Will.
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653582
I'll try Hope everything goes smooth

Last thing How do I make  sure globaladdresslist or globaladdresslist2 is my default ?

Thanks for the help
0
 
LVL 37

Assisted Solution

by:Mahesh
Mahesh earned 300 total points
ID: 39653586
There is a powershell script exists in the article you found.
Just find corrupted GAL through that script and then remove through adsiedit manually.
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653596
Hi
Just to verify

I'll just copy the script and paste it in Power Shell on exchange server ?? Please correct me
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39653600
You can use the "get-globaladdresslist" cmdlet. This will show you all of the GAL's that have been created. There will be one that says "default global address list.

Will.
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 300 total points
ID: 39653618
you probably need to save it in .ps1extension and then run through elevated powershell
It can be run through 2008 R2 DC.
ensure the powershell executionpolicy is set to unrestricted
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653640
This is the result of the script

PS C:\> c:\gal.ps1
cn=default global address list\0adel:1ed302c0-d125-43df-98ef-207055b97354,cn=deleted objects,cn=configuration,dc=domain,dc
=com
1 corrupted GAL entries found in property GlobalAddressList
0 corrupted GAL entries found in property GlobalAddressList2
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39653645
Dear Spec01 and Mahesh

I managed to delete the corrupted gal entries and now I have successfully created new  GAL

Thanks for your support I appreciate that.

God bless you.
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question