Hello,

At a small client of ours, we have received a request that the
administrative assistant have read/write access to the GAL. I have
added her to the account operators group (something agreed upon by all
of us), and she can not edit the Global Address List.

I then created a security group, and gave it security permissions on a
parent OU to the OU that contains the User objects in AD, as follows:

Read adminDescription
Write adminDescription
Read adminDisplayName
Write adminDisplayName
Read cn
Write cn
Read countryCode
Write countryCode
Read Managed By
Write Managed By
Read name
Write name
Read Name
Write Name
Read postalAddress
Write postalAddress
Read postalCode
Write postalCode
Read postOfficeBox
Write postOfficeBox
Read showInAddressBook
Write showInAddressBook
Read st
Write st
Read street
Write street


I have also checked effective permissions in the OU containing the
users, which reflect that the admin asst does have the above
permissions.

Yet, after all this, she is still unable to edit the information for
users in the GAL, both in outlook and wab.exe /find (the latter being
the preferred method).


Any ideas?


Thanks,

Matt

http://www.slipstick.com/exs/updategal.asp

only DL can be managed from outlook.

--
Diane Poremsky [MVP - Outlook]
Author, Teach Yourself Outlook 2003 in 24 Hours
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/

Outlook Tips by email:


Outlook Tips: http://www.outlook-tips.net/
Outlook & Exchange Solutions Center: http://www.slipstick.com
Subscribe to Exchange Messaging Outlook newsletter:



"Matt Brown - identify" wrote in message
...
Hello,

At a small client of ours, we have received a request that the
administrative assistant have read/write access to the GAL. I have
added her to the account operators group (something agreed upon by all
of us), and she can not edit the Global Address List.

I then created a security group, and gave it security permissions on a
parent OU to the OU that contains the User objects in AD, as follows:

Read adminDescription
Write adminDescription
Read adminDisplayName
Write adminDisplayName
Read cn
Write cn
Read countryCode
Write countryCode
Read Managed By
Write Managed By
Read name
Write name
Read Name
Write Name
Read postalAddress
Write postalAddress
Read postalCode
Write postalCode
Read postOfficeBox
Write postOfficeBox
Read showInAddressBook
Write showInAddressBook
Read st
Write st
Read street
Write street


I have also checked effective permissions in the OU containing the
users, which reflect that the admin asst does have the above
permissions.

Yet, after all this, she is still unable to edit the information for
users in the GAL, both in outlook and wab.exe /find (the latter being
the preferred method).


Any ideas?


Thanks,

Matt

Interesting... it worked then stopped.

I will install ADUC and remove the user from account operators. Not a
big deal.


Thanks,

Matt


On Feb 10, 9:44 pm, "Diane Poremsky" wrote:
http://www.slipstick.com/exs/updategal.asp

only DL can be managed from outlook.

--
Diane Poremsky [MVP - Outlook]
Author, Teach Yourself Outlook 2003 in 24 Hours
Need Help with Common Tasks?http://www.outlook-tips.net/beginner/
Outlook 2007:http://www.slipstick.com/outlook/ol2007/

Outlook Tips by email:


Outlook Tips:http://www.outlook-tips.net/
Outlook & Exchange Solutions Center:http://www.slipstick.com
Subscribe to Exchange Messaging Outlook newsletter:

it only works on DL - if you Google you'll see that outlook was never
intended to be used to update the GAL. Not even for an individual to update
their own entry.

--
Diane Poremsky [MVP - Outlook]
Author, Teach Yourself Outlook 2003 in 24 Hours
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/

Outlook Tips by email:


Outlook Tips: http://www.outlook-tips.net/
Outlook & Exchange Solutions Center: http://www.slipstick.com
Subscribe to Exchange Messaging Outlook newsletter:



"Matt Brown - identify" wrote in message
...
Interesting... it worked then stopped.

I will install ADUC and remove the user from account operators. Not a
big deal.


Thanks,

Matt


On Feb 10, 9:44 pm, "Diane Poremsky" wrote:
http://www.slipstick.com/exs/updategal.asp

only DL can be managed from outlook.

--
Diane Poremsky [MVP - Outlook]
Author, Teach Yourself Outlook 2003 in 24 Hours
Need Help with Common Tasks?http://www.outlook-tips.net/beginner/
Outlook 2007:http://www.slipstick.com/outlook/ol2007/

Outlook Tips by email:


Outlook Tips:http://www.outlook-tips.net/
Outlook & Exchange Solutions Center:http://www.slipstick.com
Subscribe to Exchange Messaging Outlook newsletter: