Re: Best way to separate user accounts?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



I know it is possible to set up individual GALS that people see so students
only see students and Teachers see everyone.

There are also ways to limit who can send to who but it takes some work from
my understanding. it has been a while since I have done the GAL thing but
microsoft has some really good white papers on GAL setup and programming

Hopefully the MVP's can remember a link or two
"NRC Help" <NRC_Support@xxxxxxxxxxxxxxxx> wrote in message
news:320BBA9A-CE54-4AC0-B5D2-DD20283B995A@xxxxxxxxxxxxxxxx
Ed,

Ok, so if I create a new store for the student accounts, which sounds like
a
good idea, is there a separate GAL for each store, or is it all one big
happy
GAL? I have a meeting on Friday which will determine if we want the
students
to have access to the faculty and staff lists, so I need to know before
then
what our options are. One other thing that will be important is the
ability
for faculty/staff to look up students via a list of some sort, I assume
the
GAL?

Jim


"Ed Crowley [MVP]" wrote:

Inline.
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

"NRC Help" <NRC_Support@xxxxxxxxxxxxxxxx> wrote in message
news:5C2548CD-AF00-4774-9476-48E88AD1D684@xxxxxxxxxxxxxxxx
We are running Exchange 2003 Enterprise Edition in single server,
single
site
mode., with AV and antispyware running locally on the server as well.
There
are about 500 accounts for faculty and staff and the server runs fine
with
little performance issues. The server is a Dell PowerEdge 2850, with a
dual
Xeon 2.8 Ghz processor, 4 GB memory, 300 GB disk space, with 250 GB
being
free. Just today it was requested that we create Exchange accounts for
~200
graduate students on this server.

Given the information above I am interested in what the experts on this
list
think would be the best route to go in regards to creating the accounts
in
a
separate storage group etc. If I create a new storage group for just
the
student accounts will they be able to get the same information from the
Global Address List, Public Folders etc. as if they were in the "main"
storage group with the rest of the faculty and staff accounts?

Yes.

If so, is this
the best practice?

Not necessarily. What do you think you're getting by putting them in a
separate storage group? If you do that, you're going to want to have a
separate physical drive for the new set of transaction logs. One idea
I've
seen is to use a separate mailbox store(s) (not necessarily storage
groups)
if you want to give this class of users a different mailbox quota so you
don't have to manage individual quotas. You can enforce the quota on the
store.

If I create the students in the "main" storage group with
the rest of the accounts, is there a way to restrict them from seeing
the
Global Address List, assuming this is what we needed?

Yes, you can create different address lists and restrict their view to
the
appropriate audiences, but it's rather tricky. Check out the Microsoft
Exchange Site's whitepapers on hosting. This feature has nothing to do
with
the store or storage group on which you put their mailboxes, however.


TIA,

Jim





.



Relevant Pages

  • Re: Hiding the GAL
    ... Create two security groups that contain staff and students (you probably ... stop it from being included in address lists lower down. ... You can create multiple GALs using this article: ...
    (microsoft.public.exchange.admin)
  • Re: Using existing attribute vs creating new one for student ID number
    ... for Lansing Public Schools for 16,000+ students. ... the schema extension was the only real option and it worked well. ... tools that specifically interact with the user class. ... accounts in synch with the AS/400 accounts required the extension so I ...
    (microsoft.public.win2000.active_directory)
  • Going A-Okay - CFI Training Continued
    ... the newsgroup is really aimed at the Private/Commercial/Instrument students. ... Let me know of course if any of you think I SHOULD post the CFI training ... accounts here and I'll resume posting them here - in the meantime I'm just ... Check out my personal flying adventures from my first flight to the ...
    (rec.aviation.student)
  • Re: Risk of issuing default password for my students
    ... The answer to your teachers should be resounding "No". ... What they're proposing is extremely dangerous because not only would ... > I have about 3,000 student accounts in my organization. ... From there students must change passwords at first logon. ...
    (microsoft.public.security)
  • Re: Using existing attribute vs creating new one for student ID number
    ... user objects have the attribute employeeID that you can use. ... If you have students with duplicate first and last names, ... the schema extension was the only real option and it worked well. ... accounts in synch with the AS/400 accounts required the extension so I ...
    (microsoft.public.win2000.active_directory)