Saturday, October 25, 2008

DSACLS.exe to restore permissions for Default global address list

www.1ask2.com

You must have the Windows Support Tools installed.



ADSIEDIT.MSC console



Deny READ Permission for Authenticated Users.




You cannot modify the permissions of Default Global Address List.

You cannot create new outlook profiles.

C:\Program Files\Support Tools>dsacls.exe "CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=Workopera,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=work,DC=com" /R "Authenticated Users"


C:\Program Files\Support Tools>dsacls.exe "CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=Workopera,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=work,DC=com" /I:T