Re: Anonymous LDAP browsing in Outlook 2003

From: Mike Presseau (anonymous_at_news.microsoft.com)
Date: 01/27/05 

Date: Thu, 27 Jan 2005 15:07:04 -0500

Dmitri,

I hope maybe you can help me as well. I have looked through tons of articles
and the ones references by MS, but I cannot find this string anywhere. the
heuristics string or anything like it. I tried using ldp.exe and the adsie
edit tool and both showed lots of info, but nothing that I was looking for.
We migrated from NT4 to 2003 AD about 6 months agoa and all is running fine,
but I do not believe we are running in Native mode yet. Can you please help
find this key so I can allow anonymous access? Authenticated access works
just fine.

Thanks

Mike

"Dmitri Gavrilov [MSFT]" <dmitrig@online.microsoft.com> wrote in message
news:OPctSd54EHA.3828@TK2MSFTNGP09.phx.gbl...
> There are no special permissions to set up for VLV. If anonymous can see
> the
> objects using normal LDAP searches, then they will also be visible via
> VLV.
>
> --
> Dmitri Gavrilov
> SDE, Active Directory Core
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Use of included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
>
> "Jose" <Jose@discussions.microsoft.com> wrote in message
> news:747C3A34-E2C3-481F-90F9-39CD6DF2CD5F@microsoft.com...
>> I have a Windows 2003 Active Directory forest with 2 DCs. I found in the
>> following Microsoft articles, "How Active Directory Searches Work" and
>> 326690, how to enable anonymous LDAP searches and these features are
> working.
>>
>> In Outlook 2003 SP1, I have defined the LDAP directory and I am able to
>> resolve email addresses anonymously. As an authenticated user to this
> domain
>> I am able to browse the LDAP directory via the Outlook 2003 SP1 address
> book.
>> As an anonymous user I am not able to browse the LDAP directory via the
>> Outlook 2003 SP1 address book. In the following Microsoft article 820864
> it
>> states
>>
>> "If your LDAP server does not provide either of these functionalities,
>> you
>> do not have the browsing feature set in Outlook 2003. Particularly for
>> the
>> VLV extension, permission is not typically granted on the LDAP server for
>> anonymous users to access the extension. Therefore, without a change in
> the
>> permission assignments, the browsing feature set in Outlook 2003 is not
>> available."
>>
>> Since I am able to browse the LDAP directory as an authenticated user,
>> how
>> can I grant the proper permissions to allow anonymous users to access the
> VLV
>> extensions on the LDAP server?
>>
>> Any help is greatly appreciated.
>>
>
>

Relevant Pages

  • Re: Anonymous LDAP browsing in Outlook 2003
    ... appropriate security permissions after you change the dsHeuristics. ... >> objects using normal LDAP searches, then they will also be visible via ... >> SDE, Active Directory Core ... >>> can I grant the proper permissions to allow anonymous users to access ...
    (microsoft.public.windows.server.active_directory)
  • Re: Anonymous LDAP browsing in Outlook 2003
    ... There are no special permissions to set up for VLV. ... objects using normal LDAP searches, then they will also be visible via VLV. ... I have defined the LDAP directory and I am able to ...
    (microsoft.public.windows.server.active_directory)
  • Re: LDAP Permissions
    ... a normal AD account that you might use as a service account for ... performing LDAP queries won't have permissions to modify anything in AD ... to authenticate the user. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Turning off secured LDAP on Win2K domain controllers?
    ... If accessing the AD database through anonymous LDAP calls is dangerous, ... would I set up a third party LDAP client to access the AD ... > support anonymous queries; Permissions on the directory must be set ... Setting Directory Permissions The following ...
    (microsoft.public.win2000.security)
  • Re: Turning off secured LDAP on Win2K domain controllers?
    ... and LDAP to connect to the AD. ... >>support anonymous queries; Permissions on the directory must be set ... Setting Directory Permissions The following ... Right click on the Domain Naming Context and select properties. ...
    (microsoft.public.win2000.security)
Loading