Understand Address Book Policies – Exchange Server 2010 Print E-mail
Written by Praveen   
Wednesday, 07 December 2011 18:14

I hope every one of us was waiting for the Service Pack 2 for Exchange 2010 to be released, may be just for the ABP (Address Book Policies). This is one good feature I think will be greatly utilized by most of us, because even without the GAL segmentation or ABP we were doing it with permissions/ACLs.

In simple, GAL Segmentation/ABP means we are grouping few of the address lists to give a segmented or Customized GAL to the exchange users. When we create an Address Book Policy, we assign a GAL, an Offline Address List (OAL), room (conference) list and one or more address lists. This policy will then be assigned to the mailbox users to give them a customized GAL in OWA/Outlook.

Here I tried to show how you can create and assign your own customized address lists and Address Book Policies to the mailbox users.

Before you begin, decide on the way we are planning to filter the mailboxes/DLs/room mailboxes. Microsoft suggest using one of the CustomAttributes as a filtering criteria, however you may proceed with your own filtration.

I have updated the value “ED_GAL” to customattribute11 of all mailbox/DLs which are to be filtered for the new GAL.

Create new Address List/Room List/GAL and OAL(offline address list),

Address List

New-AddressList -Name "AL_ED_GAL" -RecipientFilter {((RecipientType -eq 'UserMailbox') -or (RecipientType -eq "MailUniversalDistributionGroup") -or (RecipientType -eq "DynamicDistributionGroup")) -and (CustomAttribute11 -eq "ED_GAL")}

New-AL

Room List

As I have mentioned earlier, we need to have at least 1 room list for creating ABP, hence let’s create a room mailbox (if you don’t have room mailboxes, this will create a blank list)

New-AddressList -Name AL_Room -RecipientFilter {((Alias -ne $null) -and ((RecipientDisplayType -eq 'ConferenceRoomMailbox') -or (RecipientDisplayType -eq 'SyncedConferenceRoomMailbox')))}

New-Room1

If you are using room mailboxes, then create the filtering criteria, as mentioned earlier I am using customattribute11 for filtering,

New-AddressList -Name AL_ED_Room -RecipientFilter {(Alias -ne $null) -and (CustomAttribute11 -eq "ED_GAL") -and (RecipientDisplayType -eq 'ConferenceRoomMailbox') -or (RecipientDisplayType -eq 'SyncedConferenceRoomMailbox')}

GAL (Global Address List)

Next, create a GAL but ensure that the GAL includes all recipients from the newly created address lists for the ABP (address lists and room lists).

New-GlobalAddressList -Name "GAL_ED" -RecipientFilter {(CustomAttribute11 -eq "ED_GAL")}

New-GAL-modified

OAL (Offline Address List)

Now, create an offline address book from the new GAL

New-OfflineAddressBook -Name "OAB_ED" -AddressLists "GAL_ED"

New-OAL

Create ABP using the above address lists,

Execute the below powershell command to create a new ABP (Address Book Policy) with address list AL_ED_GAL, offline address Book OAB_ED, global address list GAL_ED and room list AL_ED_Room.

New-AddressBookPolicy -Name "ABP_ED" -AddressLists "AL_ED_GAL" -OfflineAddressBook "\OAB_ED" -GlobalAddressList "\GAL_ED" -RoomList "\AL_ED_Room"

The above steps create the policy, and it is now ready to be assigned. We can assign the policy to the target users now.

Assign the Address Book Policy to Mailbox users

You may either use the EMC (Exchange Management Console), or the EMS (Exchange Management Shell) to assign the policy to mailbox users.

The below command will assign the policy to all users whose CustomAttribute11 is updated with

Get-Mailbox| where {$_.CustomAttribute11 -eq "ED_GAL"}| Set-Mailbox -AddressBookPolicy "ABP_ED"

Apply-ABP

If you wish to verify the result, execute the below command,

Get-Mailbox| where{$_.CustomAttribute11 -eq "ED_GAL"} | select Name,PrimarySMTPAddress,AddressBookPolicy (see the figure above, that shows the output)

If you wish to assign the policy using Exchange Management Console, go to the mailbox properties and the option is available under Mailbox Settings.

Thats it, we have finished creating and applying the Address Book Policies. Now the users to whom we have applied the policy can only see the address lists available in the policy. You may modify the address list later on to accomodate more address lists but ensure that the main GAL in the ABP accomodate the recepient from all address list that you are adding into the policy.

Let’s now see the Address Book of the user Ex2010Test1

Address_List

You can see that, the address lists available to the user is restricted to the address list available in the policy. The offline address book will be available to the user when they configure the outlook.

Hope this post will give you an idea on how the GAL segmentation works in Exchange Server 2010 Service Pack 2. The process is just simple, you just need to decide on how you are going to segment the GAL and assigning the mailbox users.

Post your experience on ABP as comments……

Ref - Understanding Address Book Policies

-Praveen

AddThis Social Bookmark Button
Last Updated on Sunday, 11 December 2011 12:09
 

Comments  

 
0 # am 2012-01-24 05:35
8) and what i make wrong when i have the correct result in the owa but not in the outlook 2010 ... there i see the hole adresslists... sad but true - best regards am - and thanks a lot for help ;-=
Reply | Reply with quote | Quote
 
 
0 # CM 2012-02-22 18:09
Same here .. It's funny how all the guides on the web only looks in OWA, but not in Outlook. There is all the tenants address lists, listed under the "All Address Lists" container .. What to do?
Reply | Reply with quote | Quote
 
 
0 # _Praveen 2012-02-23 10:04
@AM and @CM
I have tested it with Exchange 2010 and Outlook 2007 on my lab, and worked. Please re-visit your steps, it should work. Ensure that you have selected custom created address lists for
GAL, OAB, Room List and Address Lists of Address Book Policy(ABP)crea ted.

Thanks.
Reply | Reply with quote | Quote
 
 
0 # CM 2012-02-23 14:24
Hey. I found this:

From Technet:
Do not run CAS role on a Global Catalog - doing so results in Active directory being used for NSPI, not the Address Book Service, bypassing all of the logic built in to the feature

From MSExchange.org:
So you can’t use ABP’s if Exchange is installed on a GC as NSPI is provided by AD, not Address Book Service
Reply | Reply with quote | Quote
 
 
0 # _Praveen 2012-02-23 16:21
@CM :- Thank you for sharing the details. I did not check this scenario BTW. :-?
Reply | Reply with quote | Quote
 

Add comment


Security code
Refresh

Read In

ARCHIVES

VISITORS

mod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_counter

Online : 22
Your IP: 38.107.179.207
,

Follow Us