Creating contacts in GAL Exchange 2003 (Active Directory)

pts.
Tags:
Exchange security
Microsoft Exchange
Hi, I have a little scenery where there is a little network (10 PCs and a MS SBS 2003 Server). They are using Exchange from SBS. They want than users are able to create new contacts with SMTP mail address in the GALs so it will be common for every user that uses MS Outlook. Is there a better way to make it than make it from Active Directory Users and Computers MMC? I have tried with this MMC console, installing it on the PCs from the Exchange 2003 CD, I created an OU and give limited permissions on this OU to create only contacts but the option to create emails is not enable for standard users, how can I do it limiting user access?, or a better and easy to users to make it without this console. Someone know a more easy and practical way for users with the minimum authorization for changes in AD?

Answer Wiki

Thanks. We'll let you know when a new response is added.

Maybe after creating the OU, you could use the “delegation” feature for the specified users (or group)…?

Discuss This Question: 6  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Ouobacrsbf
    I don't think that the standards users even with some certains rights can make changes in AD.. You have to know that AD is, the most of time only accessible by the admistrators accounts, so it will be very difficult that even you octroy permissions to users to modify AD structure. But let's look for...
    0 pointsBadges:
    report
  • Petroleumman
    Hello, Am I correct in assuming you want to have users create contacts in the GAL that can be accessed by all domain users? If this is the case you need to think more in terms of creating a public contacts list and point all of your users Outlook address books to that folder. To do this simply create a public contact folder under Exchange public folders and assign permissions allowing users to create contacts in that folder. Next in Outlook, right-click the new folder and select properties. On the Outlook Address Book tab check the box 'show this folder as an email address book'. Now this contact list will appear in the Outlook address book selection list. The GAL is a compilation of domain users. That being said in order to add 'contacts' to the GAL you essentially have to create domain accounts for each new 'contact'or user that you wish to add. However, if this is actually your intention, you can use the 'delegate control' option in ADUC and assign permissions to one or more users giving them the ability to create new users. You can delegate control to a user for an OU or if you want, at the top level domain. Simply open ADUC and right-click a container and select 'Delegate Control' from the list. This starts a wizard which will guide you through the process. Good Luck!
    0 pointsBadges:
    report
  • Stevesz
    I would aslso suggest going the public folder route. You can give everyone read/write rights tot he PF. Letting users have any kind of access to AD is very dangerous. Even people who know what they are doing can make errors, and once someone can write to the AD, you have lost control over what they do. Go the public folder route. Steve
    2,015 pointsBadges:
    report
  • Ghostsword
    Do following: - Go to your outlook - Go to Public folders - Create a new folder, one that will take the contacts - Go to Exchange System admin - Asign permisions to the newly created public folder - On Outlook just add that public folder as an address book #Right click on it #Select to add as outlook address book Now selected users, or all, can create new entries on this address book and use it. Let me know if you need more information. Luis
    0 pointsBadges:
    report
  • Ursulus
    The short answer is.. don't use GAL for this.. you are asking for a world of pain! Create a Public contacts folder and add it to all users as a favourite and as an Outlook Address book.. problem solved.. this also means you can create specific address lists for specific groups of people if you need to. Ursulus
    0 pointsBadges:
    report
  • Schnell
    A lot of thanks to all of you. It works great using public folders :)
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following