Sign in
 
Exchange Server TechCenter > Exchange Server Forums > Admin > Hide Distribution Group from GAL - only for certain group of users?
Ask a questionAsk a question
Search Forums:
 

AnswerHide Distribution Group from GAL - only for certain group of users?

  • Tuesday, November 03, 2009 7:19 PMToni Rantanen Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    Is it possible to hide Exchange 2007 Distribution Group for certain group of users in GAL?

    My client is having at their organization some Distribution Groups which are only for "eyes of certain people". Is it possible to hide these Distribution Groups so that only these users would be able to see them in GAL and wouldn't?

    Thanks for your help.

    Best regards,
    Toni
     

Answers

  • Tuesday, November 03, 2009 8:28 PMAndyD_MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    1
    Sign In to Vote
    The only real supported way to do that is Address List Segregation. Not a path you probably want to go down for a few Distribution Lists. But if you do:
    http://technet.microsoft.com/en-us/exchange/bb936719.aspx


    Personally, I would hide them from the GAL and then have the users simply send to those lists using the SMTP address. Dont forget to put delivery restrictions on those lists as well ( for only the allowed users).

    While they are visible in the GAL, you could even ask then users to right-click the groups, add to their contacts and then hide the groups.

     

All Replies

  • Tuesday, November 03, 2009 7:25 PMRajnish R Sharma Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    You cannot hide distribution group in exchange 2007 http://technet.microsoft.com/en-us/library/dd577075.aspx

    "When you use the Active Directory Users and Computers snap-in to update a distribution group, Active Directory uses the canonical name of the object to set Access Control List (ACL) entries. However, to hide distribution group membership, Exchange requires setting non-canonical ACLs. In Exchange 2003, the Recipient Update Service (RUS) is available to stamp ACLs on hidden distribution lists. However, because Exchange 2007 does not include the RUS, Exchange 2007 cannot verify that the distribution group membership remains hidden."
    Raj
     
  • Tuesday, November 03, 2009 7:42 PMToni Rantanen Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi Raj,

    Thanks for your quick answer!

    Maybe I did not understood the article you referred correctly... Please correct if I'm wrong. But I am not willing to hide Distribution Group membership. I would like to hide a whole Distribution Group from GAL and not for all users, only some. Is this also not possible? Does the same explanation goes into this as well?

    Best regards,

    Toni
     
  • Tuesday, November 03, 2009 8:28 PMAndyD_MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    1
    Sign In to Vote
    The only real supported way to do that is Address List Segregation. Not a path you probably want to go down for a few Distribution Lists. But if you do:
    http://technet.microsoft.com/en-us/exchange/bb936719.aspx


    Personally, I would hide them from the GAL and then have the users simply send to those lists using the SMTP address. Dont forget to put delivery restrictions on those lists as well ( for only the allowed users).

    While they are visible in the GAL, you could even ask then users to right-click the groups, add to their contacts and then hide the groups.

     
  • Tuesday, November 03, 2009 9:00 PMToni Rantanen Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    Thanks Andy! This did answered to my question. I will put weigh to these options and discuss with my client how to proceed.

    Thanks a lot for your help!

    Best regards,
    Toni