MS Exchange 2003 experts in here please

[Davey_Pitch]

I know a couple of you have used this before (Daz and Burble come to mind), so maybe you know the answer to this.....

At work we've just had an Exchange 2003 server put in. Rather than install Outlook on everyone's desktop (for reasons no-one has fully explained to me), we're using Outlook Web Access instead. This generally works fine for most things, though I'm having trouble with one particular area.

We have a default GAL which as standard includes all the teachers and all the students. What we'd like to do, is make 2 GAL's - 1 for staff, and 1 for the kids. We would then deny the students access to the staff GAL, but make both available to staff.

Now, I know the theory behind this. I would need to create 2 new security groups in AD, one for staff, and one for students, as well as both GAL's, then by using the new security groups allow or deny permissions as required. However, it appears that the Web version of Outlook can only see and use one GAL. This strikes me as rather odd, and makes me think that there has to be a way around it somehow. For once Google isn't providing much help, but I'm sure it can be done somehow, it just seems too stupid to leave a key feature out of OWA like that.

If any of you have any ideas about it, or can point me in the right direction, I'd be very grateful

[Daz]

Originally Posted by Davey_Pitch

At work we've just had an Exchange 2003 server put in. Rather than install Outlook on everyone's desktop (for reasons no-one has fully explained to me), we're using Outlook Web Access instead.

:/

Reeealy not what that was designed for. And I hope they still bought CAL's for it

Originally Posted by Davey_Pitch

We have a default GAL which as standard includes all the teachers and all the students. What we'd like to do, is make 2 GAL's - 1 for staff, and 1 for the kids. We would then deny the students access to the staff GAL, but make both available to staff.

Now, I know the theory behind this. I would need to create 2 new security groups in AD, one for staff, and one for students, as well as both GAL's, then by using the new security groups allow or deny permissions as required. However, it appears that the Web version of Outlook can only see and use one GAL. This strikes me as rather odd, and makes me think that there has to be a way around it somehow. For once Google isn't providing much help, but I'm sure it can be done somehow, it just seems too stupid to leave a key feature out of OWA like that.

If any of you have any ideas about it, or can point me in the right direction, I'd be very grateful

You will only ever see one Global Address List in any Exchange client, by definition. You can create custom ones on top of this for user groups to use, but they should only ever see one GAL.

Simple solution anyway, make the staff GAL contain students as well. I know if I was one of those users, I wouldn't want to keep switching between address lists to email different people.

Students GAL - Students only
Teachers GAL - Students and teachers

If you want to do it your way for the teachers, then you'd need to create a students custom address list and give permission for the teachers to see that (under 'All Address Lists' rather than 'All Global Address Lists').

[Davey_Pitch]

Well, this was a short needed thread. Just had a chat with my boss, and with a little gentle persuasion, plus a demo of what the desktop version of Outlook can do, we'll be using the desktop version instead. We'll probably keep using the web version until October half-term, but I'm fine waiting till then. Thanks for your help Daz

[Stan_Lite]

Wish I could persuade my company to do the same.

We have to use Outlook Web Access now and it sucks badly. We can only download e-mails if we are in the office which means that if we want to access old e-mails, we have to be online - I hate it, it's pants

Stan