Implementing Address Book Policy – Exchange Server 2010
Global address list (GAL) segmentation (also known as GAL segregation) is the process whereby administrators can segment users into specific populations to provide customized views of their organization’s GAL. Address book policies (ABPs) allow you to segment users into specific groups to provide customized views of your organization’s global address list (GAL). When creating an ABP, you assign a GAL, an offline address book (OAB), a room list, and one or more address lists to the policy. You can then assign the ABP to mailbox users, providing them with access to a customized GAL in Outlook and Outlook Web App. The goal is to provide a simpler mechanism to accomplish GAL segmentation for on-premises organizations that require multiple GALs. .
In the following figure, Address Book Policy A consists of a subset of the various address objects that exist in the organization. The resulting scope of an ABP is equal to that of the GAL contained in the policy. When the ABP is created and assigned to a user, the address objects in the ABP become the scope of the objects the user is able to view.
Example:
Prerequisites:
1: Exchange 2010 should not be installed on a GC or DC, Especially Client Access Server
(Address book policies won’t work for Outlook but It will work for OWA alone,)
2: Any Client Device or Client Software access Active Directory directly for Directory Access then
ABP won’t work Like, Outlook is hard coded to GC &
Entourage 2008
3: Outlook clients should be at least – Outlook 2007, Outlook 2010
Outlook 2003 with Latest Service pack does recognize Address book policies but we might face little complications, its my personal experience Like , login credentials should be the exact same as the Email Credential
Those are the most important Check lists before you going to implement it
Create new Address List/Room List/GAL and OAL (offline address list),
We need to Create 4 things for Every Address Book Policy,
- Global Address list
- Address list
- Rooms list
- Offline Address book now will create an Address Book Policy for the Melody
- Global Address list
Creating a Global Address list
Need Exchange Management Shell to create Global Address list,
Where users with Custom attribute 1 with value “Helpdesk” only will show up
New-GlobalAddresslist “Helpdesk-GAL” -ConditionalCustomAttribute1 ” Helpdesk” -IncludedRecipients “AllRecipients”
Input:
Output:
- Address List
Creating a Address list
New-Addresslist Helpdesk-AL -ConditionalCustomAttribute1 “Helpdesk” -IncludedRecipients “AllRecipients” Ran the below command: get-addresslist
Input:
Output:
Now run the command Get-Addresslist
- Room List
Creating a Room List
New-AddressList -Name “Helpdesk-Room” -RecipientFilter {(Alias -ne $null) -and (CustomAttribute1 -eq “Helpdesk”) -and (RecipientDisplayType -eq “ConferenceRoomMailbox”) -or (RecipientdisplayType -eq “SyncedConferenceRoomMailbox”)}
Input:
Output:
- Offline Address Book
Creating a Offline Address Book
New-OfflineAddressBook -Name “Helpdesk-OAB” -AddressLists Helpdesk-GAL
Input:
Output:
Get-OfflineAddressBook
Input:
Output:
Now Let’s create ABP (Address Book Policy) using the above address lists
Execute the below powershell command to create a new ABP (Address Book Policy) with
Address list Helpdesk-GAL,
Offline address Book Helpdesk-OAB,
Global address list Helpdesk-GAL and
Room list Helpdesk-Room.
Address book Policy
Input:
New-AddressBookPolicy -Name “Helpdesk-ABP” -AddressLists (get-AddressList Helpdesk-AL*) -OfflineAddressBook “Helpdesk-OAB” -GlobalAddressList “\Helpdesk-GAL” -RoomList “\Helpdesk-Room”
So let’s see the output as shown below:
The above command creates the policy, and it is now ready to be assigned. We can assign the policy to the users.
Here you can either use the EMC (Exchange Management Console), or the EMS (Exchange Management Shell) to assign the policy to mailbox users.
You can run in Exchange Management Shell
Get-mailbox “User1” | Set-mailbox –customattribute1 “Helpdesk”
To apply for all the mailboxes
Get-mailbox | Set-mailbox –customattribute1 “Helpdesk”
To apply for the Users in a Specific Database
Get-mailbox –database “Database Name” | Set-mailbox –customattribute1 “Helpdesk”
To Apply for one Distribution group
Get-DistributionGroup “Group1” | Set-Distributiongroup –customattribute1 “Helpdesk”
To apply for one Dynamic Distribution Group
Get-DynamicDistributionGroup “Group1” | Set-Distributiongroup –customattribute1 “Helpdesk”
Post Creating the Address book policy, we applied them to the users.
Now log into the mailbox & verify that the user is able to view only Helpdesk GAL not the default GAL .
Verification:
1: Open EMC (Exchange Management Console)
Navigate to Recipient configuration -> Mailbox -> Custom Attribute see if you are able to find the custom attribute to the assigned users.
2: Launch the Outlook and check the Offline Address Book
For More Info:
Praveen Kumar
MCTS, MCITP | Exchange Server
Publisher @ Techrid.com
Praveen Kumar
TechRid 