5 pts.
 GAL Exchange 2003
Would like to restrict users from altering, especailly deleting names from the global address list in exchange 2003. Have set security for 'everyone' and 'domain users' in AD and Exchange System Manager - thanks

Software/Hardware used:
ASKED: January 29, 2009  2:02 AM
UPDATED: January 30, 2009  12:12 AM

Answer Wiki:
By default noone has the rights to do this unless they have rights to Active Directory. And even then, when you pull up the GAL and double-click a name, none of the fields are editible from there. These fields are generated from Active Directory and are view-only from the GAL. ========================== Make sure there is no AD delegation to general user groups, and check the security settings on your user folders in AD. Remove non-administrative users from groups which have elevated priviledges like the domain admins group and the administrator group.
Last Wiki Answer Submitted:  January 30, 2009  12:12 am  by  Technochic   56,975 pts.
All Answer Wiki Contributors:  Technochic   56,975 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _