GAL Hick-up
We recently noticed that there were some blank entries in the GAL, in other words, there was a completely blank line between some objects in the GAL. If I double-clicked on any of these blank entries I’d receive the following message:
The properties dialog box could not be displayed. Internal MAPI error: An unsupported interface was requested of an object property. Contact your administrator.
The blank entries where only included in the ‘online’ GAL, offline address books were not affected, as well as Outlook Web Access and Outlook Mobile Access.
It turned out that someone had modified the security ACL of an OU, and Exhange no longer had access to view these users. The OU contained user objects for users who had left, but they were still mail-enabled, although interestingly enough, hidden from address lists. Once I set the permissions of the OU back to the default (which includes rights for the Exchange Domain Servers and Exchange Enterprise Servers, and rebuilt the domain RUS object the blank entries disappeared.
Ben Christian said,
April 30, 2007 @ 4:54 am
Guess what, we share the same name!!
Google’d my name and found this site, its pretty swish.
Anyway thought i’d share that
Bye
Simon Cusack said,
June 21, 2007 @ 6:19 am
Once I set the permissions of the OU back to the default (which includes rights for the Exchange Domain Servers and Exchange Enterprise Servers
What are the default permissions for Exchange Domain Servers and Exchange Enterprise Servers on the OU. Or what did you give them? We have a similar problem but the public folder GAL entry is blank.
Ben Christian said,
June 23, 2007 @ 10:08 pm
Hi Simon,
I’m fairly sure that public folders share the same requirements. The Exchange Domain Servers group seemed to be the missing group in our case. I found a blog entry here that discusses the default permissions for public folders:
http://msexchangetips.blogspot.com/2006/09/exchange-default-permissions-on.html
You can view the permissions for a specific folder in ESM by expanding the public folder tree and openning the foler’s properties. Click on the permissions tab, then click on Administrative Rights.
Ben.