Software

Ask something
Discussion Locked

Exchange 2000 address lists

0 helpful
4 replies

by justin.dickon

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

We have a win2k forest containing two domains, each domain has an Exchange 2000 server. I have created GAL for each domain and address lists specifically for each domain.

This all works well. We use permissions on the lists to grant accessto the appropriate domain and filters to create the lists.

Because the acutal servers are connected via a fast link, they are part of the same admin and routing group so no custom connectors are needed to connect the two servers.

The problem is the GAL. Because it contains contacts, groups and users... a filter doesn't work properly. The GAL for one domain contains the dist groups from the other domain.

The filter uses the Notes field to see which domain a user belongs to and only addsthose users from the proper domain to the GAL. But if I add another criteria filter so that only dist groups from the proper domain are added, no records are found.

I know this is because the criteria uses an AND rather than an OR statement whenfurfilling the LDAP query. Of course, user notes AND Group notes = value will always produce no records...

My questions...
1. can anyone tell what the actual LDAP query should be so that it changes an AND query to an OR query (where User Notes field = value OR Group Notes field = value...)

2. Is there someother way... so that the GAL contains only objects from the proper domain...

Have tried to create the LDAP query myself but (as I am sure most can sympathise with) I am running out of time and cant afford to sit down and learn LDAP querying at the moment. And then there is the limit (just over 200 char's i think)to the number of char's an LDAP query in Exchange find box can have...

Help!!!

Thanks
Justin

4 replies

by nguyent

I did disable the GAL and then create different addres list. Therefore I can limit who can see who on the address list. (I have about each address list for each department, group and one for all that can be include contacts)
I don't know you want to do this or not.

by justin.dickon

Hi,

Have already created seperate address lists (all contacts, groups, public folders and users) which are fine as only one criteria statement is needed to limit the membership but really would need the GAL to combine all of these but limited to the one domains objects.

I have two GALs - one for each domain - permissioned for domain users in each domain but each GAL includes groups from both domains because using the advanced filter critieria, you can only have one criteria... if two criteria's are used the default "connection" is AND rather than OR.

So... have tried writing an LDAP query and using an OR (in LDAP is a |) instead of AND. Have now got this going so that both groups and users are shown correctly. Now just have to include contacts and public folders.... *sigh*

Am thinking that i am now going to hit the max size for an LDAP query in Exchange manager...

by justin.dickon

Managed to figure this one out myself. Through trial and error using the auto generated queries and then modifiying them to suit...

This discussion is closed to new replies.