How to use the GAL Modify tool (272198)

MORE INFORMATION

To let users update attributes on their own accounts against the server that is running Microsoft Exchange 5.5 Server, follow these steps.

Warning If you use the raw mode of the Exchange Server Administrator program (admin /r) incorrectly, serious problems may occur that may require you to reinstall Microsoft Windows NT Server, Microsoft Exchange Server, or both. Microsoft cannot guarantee that problems that result from using raw mode incorrectly can be solved. Use raw mode at your own risk.

1. Start the Exchange Server Administrator program in raw mode by typing "drive:\exchsrvr\bin\admin.exe /r" (without the quotation marks), and then press ENTER. In this command, drive is the drive on which Exchange Server is installed. For example, type "c:\exchsrvr\bin\admin.exe /r" (without the quotation marks).
2. In the Exchange Server Administrator program, click View on the main menu.
3. On the View menu, click Raw Directory.
4. In the right pane, double-click Schema.
5. Double-click the attribute that you want to modify.
6. In the Access-Category box, change the value to 2. This value denotes user access.
   
   Note The Access Category property of an attribute determines the rights that a user must have to be able to modify the attribute. The Access Category property value definitions are as follows:
   • 0: Only the system can modify the attribute.
   • 1: Users who have the Modify Admin Attributes permission can modify the attribute.
   • 2: Users who have the Modify User Attributes permission can modify the attribute.
   • 3: Users who have Modify Permissions rights can modify the attribute.
   For example, the Exchange Phone Number attribute, which is mapped to the LDAP telephoneNumber attribute, has an Access Category of 2. This means that users who have the "Modify Users Attributes" permission on the object can change the value. The Primary Windows NT Account that is associated with a mailbox is granted "Modify Users Attributes" permission by default. Therefore, the primary user of the mailbox can change the telephone number in the directory.
7. Click Set.
8. Click OK. When the warning message appears, click OK again.

To let users update attributes on their own accounts against the server that is running Microsoft Exchange 2000 Server or Microsoft Exchange Server 2003, follow these steps:

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. Right-click the Domain container, and then click Delegate Control.
3. Click Add, click the special account Self, click OK, and then click Next.
4. Click to select the Create a custom task to delegate check box, and then click Next.
5. Click to select the Only the following objects in the folder check box, click User objects in the list, and then click Next.
6. Click to select the Property-specific check box, set each attribute that you want your users to modify, and then click Next.
7. Click Finish.
   
   Users can now use Galmod32 or the Windows Search applet to update their information in Active Directory.

The permissions on your user account determine the global address list entries that you can modify. If you have Domain Users permissions, you can modify the following fields in your own global address book entry:

• Address
• City
• Business Phone Number
• State
• Fax
• Home Phone Number
• Mobile Phone Number
• Notes
• Office
• Pager
• Zip Code

If you have Domain Administrator permissions, you can modify the following fields:

• Assistant
• Company
• Country
• Department
• Title

Note The Country attribute is not displayed as a text box in the Active Directory Users and Computers snap-in. When you use GAL Modify to change the Country attribute, the changes are displayed in the Outlook Address Book instead of in the user attributes in the Active Directory Users and Computers snap-in.

To install GAL Modify, use one of the following methods:

• Run the Exchange 2000 Resource Kit Setup.exe file which installs GAL Modify in the Program Files\Exchange Server 2000 Resource Kit\Tools\Client\Galmod32 folder.
• Start the Exchange 2000 Resource Kit CD-ROM, browse to Exreskit\Tools\Client\GALMod32, and then copy Galmod32.exe to a folder on your local hard disk.
• From the Exchange\operating system\platform\Client\GalMod folder on the Microsoft Back Office Resource Kit, Second Edition CD, copy the Galmod32.exe file to your computer, to a user's computer, to a public folder, or to a network share. Any computer that can run the 32-bit Microsoft Exchange Server client or Microsoft Outlook client can run the Galmod32.exe program.

To use GAL Modify to modify global address list entries, follow these steps:

1. Run Galmod32.exe to start GAL Modify.
2. Click the profile name that you want to use, and then click OK.
3. Click the entry that you want to modify.
4. Click OK to save your changes.