Warning If you use the ADSI Edit snap-in, the LDP utility, or any other
LDAP version 3 client, and you incorrectly modify the attributes of Active
Directory objects, you can cause serious problems. These problems may require
you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003,
Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows
and Exchange. Microsoft cannot guarantee that problems that occur if you
incorrectly modify Active Directory object attributes can be solved. Modify
these attributes at your own risk.
To resolve this problem, use the ADSIEdit.msc
tool to confirm that the default GAL object is configured for the following
permissions.
Collapse this tableExpand this table
Accounts | Permission | Apply to |
---|
Authenticated Users | Open Address List | This
object only |
Authenticated Users | List Contents | This object
and child objects |
Domain Admins | Full Control | This object
only |
System | Full Control | This object only |