Well, OK. I think you are correct that if you don't have rights to view the
object within the GC they can't access it (because you are more beautiful
and smarter than I), but I'm not sure that restricting the search
permissions on the Global Address List object in the ESM alone is sufficient
to restrict the ability to view an object in AD (through other means).

> -----Original Message-----
> From: Baker, Jennifer [mailto:[EMAIL PROTECTED]]
> Sent: Friday, August 16, 2002 5:12 PM
> To: Exchange Discussions
> Subject: RE: Global Address Lists
> 
> The DN thingy didn't work for me.  I'm not changing my answer.  :)
> 
> -----Original Message-----
> From: Chris Scharff [mailto:[EMAIL PROTECTED]]
> Sent: Friday, August 16, 2002 3:10 PM
> To: Exchange Discussions
> Subject: RE: Global Address Lists
> 
> 
> Sort of. :)
> 
> > -----Original Message-----
> > From: Baker, Jennifer [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, August 16, 2002 5:10 PM
> > To: Exchange Discussions
> > Subject: RE: Global Address Lists
> >
> > Add them to the NewGal group??  I don't see the problem.  Are you
> > suggesting
> > that you do not want to add them to this group and you need another way
> > for
> > the person outside of the group to be able to logon?
> >
> > If the mapi user does not have rights to view their user object within
> the
> > global catalog then they cannot use mapi.
> >
> > -----Original Message-----
> > From: Wendy Reetz [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, August 16, 2002 2:35 PM
> > To: Exchange Discussions
> > Subject: Global Address Lists
> >
> >
> > In E2K  if I hide UserA from the global access list, they can log in
> > through
> > OWA, but not through outlook (xp).  Is that typical behavior?  or do I
> > have
> > something configured wrong?  Is there another way to restrict who's seen
> > in
> > the Address books by Outlook users?
> >
> > I have it set up where the Default Global Address List is disallowing
> > "Open
> > Address List".  This hides it's contents from users.  I then have
> another
> > NewGAL defined for a group.  That group has "Open Address List" rights,
> &
> > can log in & see their list just fine.  The problem comes when a person
> > from
> > outside the group wants to log in.  Not being in my NewGAL list, they
> get
> > a
> > "The name could not be resolved.  The name could not be matched to a
> name
> > in
> > the address list." message.
> >
> > Short of allowing everyone to see the Default GAL, any suggestions?
> >
> > Please help!!  :-)
> >
> > Wendy
> >
> >
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> >
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to