Microsoft KB Archive/944334

= Access is Denied When Users Access Global Address List in Microsoft Exchange Server 2007 Outlook Web Access =

Article ID: 944334

Article Last Modified on 10/29/2007

-

APPLIES TO


 * Microsoft Exchange Server 2007 Enterprise Edition
 * Microsoft Exchange Server 2007 Standard Edition

-



Source: Microsoft Support



RAPID PUBLISHING
RAPID PUBLISHING ARTICLES PROVIDE INFORMATION DIRECTLY FROM WITHIN THE MICROSOFT SUPPORT ORGANIZATION. THE INFORMATION CONTAINED HEREIN IS CREATED IN RESPONSE TO EMERGING OR UNIQUE TOPICS, OR IS INTENDED SUPPLEMENT OTHER KNOWLEDGE BASE INFORMATION.



Action
In Microsoft Exchange Server 2007 Outlook Web Access, a user tries to access the Global Address List (GAL) by clicking the &quot;To...&quot; button on a new message or clicking the address book icon.



Result
The user receives the following error:

&quot;Access is denied. Outlook Web Access was unable to access the Active Directory resource. This may be because the Active Directory object does not exist or the object has become corrupted or because you do not have sufficient access rights for that object&quot;.

Note The same user can access the Global Address List without any problem in Microsoft Outlook 2007 online mode and cache mode.



Cause
On the object &quot;CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=com&quot;, the Globaladdresslist attribute contains an invalid entry. Either the first object in the list is a deleted Global Address List object, or users do not have sufficient access rights for this object.



Resolution
To remove the invalid Global Address List objects from the Globaladdresslist attribute:

1. In Adsiedit, locate the object CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=,DC=com&quot;

2. Right-click on the object and choose Properties.

3. From the list of Attributes, select globaladddresslist.

4. Click the Edit button.

5. Remove any invalid GALs. (For example, a tombstoned directory entry by the DEL:{GUID} moniker in the distinguished name of the object: CN=Default Global Address ListDEL:04f0ec0c-1bd4-4525-b1fa-3a5b24513c92,CN=All Global Address Lists,CN=Address Lists Container,CN=,CN=Microsoft Exchange,CN=Services, CN=Configuration,DC=,DC=com)

6. Click OK twice.

7. Force replication between the Domain Controllers.



MoreInformation


DISCLAIMER
MICROSOFT CORPORATION AND/OR ITS RESPECTIVE SUPPLIERS MAKE NO REPRESENTATIONS ABOUT THE SUITABILITY, RELIABILITY, OR ACCURACY OF THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN. ALL SUCH INFORMATION AND RELATED GRAPHICS ARE PROVIDED &quot;AS IS&quot; WITHOUT WARRANTY OF ANY KIND. MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS HEREBY DISCLAIM ALL WARRANTIES AND CONDITIONS WITH REGARD TO THIS INFORMATION AND RELATED GRAPHICS, INCLUDING ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, WORKMANLIKE EFFORT, TITLE AND NON-INFRINGEMENT. YOU SPECIFICALLY AGREE THAT IN NO EVENT SHALL MICROSOFT AND/OR ITS SUPPLIERS BE LIABLE FOR ANY DIRECT, INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF USE, DATA OR PROFITS, ARISING OUT OF OR IN ANY WAY CONNECTED WITH THE USE OF OR INABILITY TO USE THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN, WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF MICROSOFT OR ANY OF ITS SUPPLIERS HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES.

Keywords: kbnomt kbrapidpub KB944334

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.