Users Cannot Access the Global Address List in Outlook Web Access
Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.
Users may receive the following error when they use the global address list (GAL) in Outlook Web Access:
Access is Denied
Outlook Web Access was unable to access the Active Directory resource. This may be because the Active Directory object does not exist or the object has become corrupted, or because you do not have sufficient access rights for the object.
Cause
You can create multiple GALs in Microsoft Exchange (Exchange 2000 Server and later versions) and control access to the GALs by using permissions on them. This lets you specify which GAL is available to users who use Microsoft Office Outlook.
Outlook Web Access uses a different model for determining which GAL to display to users than Outlook does. Outlook Web Access will always return the first GAL that is listed in the globalAddressList attribute for the user. If the user does not have permission to access that GAL, they will receive an error message that tells them that access is denied.
Resolution
To give Outlook Web Access users access to something other than the first GAL that is available, create custom address lists. Use the querybaseDN parameter of each user's account to specify which address lists they should have access to.
For More Information
For more information about how to create address lists and control access to them for Outlook Web Access users, see:
For more information about global address lists, see Managing Global Address Lists.