is there a way to populate the GAL form OWA or outlook and not directly from exchange? RRS feed

  • Question



    Is there a way to populate the GAL form OWA or outlook and not directly from exchange 2007?

    My goal is to give GMs access to the GAL so that they may update the GAL them self and not I.T.

    Basically, what I have done is install ADSI Edit on my exchange server. Then open AdsiEdit and connect the Configuration Partition, and drilled down to Configuration, Services, Microsoft Exchange, organization name, Address Lists Containers, All Global Address Lists. And then click the GALs required, and changes the permissions to write for my test user. I think that should give my user rights to be able to write on the global address list threw the OWA or outlook, but I don’t know why it’s not working.

    I also forced updated the folders to pass down the write permission but it’s not working. Like this:

    [PS] C:\Windows\system32>Get-GlobalAddressList "Default Offline Address Book" | Update-GlobalAddressList.


    Basically, I adapted a idea that I found on the web and tried to implement this by adding the write permission to the address list folder instead of only view permission. From my point of view it should work, but I guess there is something I am missing, please help.

    Here is the web page from where I got the idea:



    • Edited by RiichieE Tuesday, January 31, 2012 9:14 AM
    Tuesday, January 31, 2012 8:22 AM

All replies

  • It is not possible alter/Modify/manage GAL using outlook. It can be done only from exchange server.

    You can modify DLs from outlook.

    Alternatively you can give them the rights to use exchange management console or shell on their local computers.


    Vinit Nair MCSE | MCITP - Exchange 2007 "Sanity and happiness are an impossible combination."
    Tuesday, January 31, 2012 10:43 AM

    No you can not do fron outlook, it can be done fron exchange only…








    Tuesday, January 31, 2012 1:26 PM
  • Vinit M Nair
    Allianz Cornhill,


    I thought about that too but doing these gives too much power to users that generally don't know I.T. or the system. I am afraid that doing this could impose a risk on the organization. Is there a way of given them access using exchange management console in a very restrictive way. I only want them to see mailbox name and user data like location address etc.

    • Edited by RiichieE Tuesday, January 31, 2012 4:55 PM
    Tuesday, January 31, 2012 4:53 PM
  • Hi RiichieE,

    There is no the method for you to do it in exchange 2007 system.
    Per my know, there are some ways in exchange 2010 system, such as ECP, RBAC.
    You could get some information from here:



    TechNet Community Support

    Monday, February 6, 2012 9:29 AM