DOCUMENT:Q261294  06-AUG-2002  [exchange]
TITLE   :XADM: Using Search Permissions to Suppress Container Views
PRODUCT :Microsoft Exchange
PROD/VER:winnt:5.5
OPER/SYS:
KEYWORDS:exc55

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Exchange Server, version 5.5 
-------------------------------------------------------------------------------

SUMMARY
=======

In certain situations, an Exchange Server site is built with Recipients
containers which follow an organizational structure. After you add a mailbox to
one of these containers you cannot move it to another container within the
directory when the person changes locations within the organization.

For example, during the initial setup of your Exchange Server directory you
defined four Recipients containers: Sales, Marketing, Operations, and
Administration, and created mailboxes in each container based on the group each
individual works in. When User A in Operations moves to the Administration
group, you cannot move User A's mailbox to the Administration container.

MORE INFORMATION
================

Although there is no way to change the location where the objects are stored in
the Exchange Server directory without re-creating the account, you can use
Address Book Views to change the view that the users see to reflect the current
organizational structure. To do this, follow these steps:

1. Populate the field by which the Global Address List is sorted (such as the
   Department field) for all mailboxes in the site.

2. In the Exchange Server Administrator program, on the File menu, point to New
   Other, and then click Address Book View.

3. Type the "<display name>" (without the quotation marks) and the
   "<directory name>" (without the quotation marks) for the view you want
   to create.

   NOTE: Type a descriptive directory name (for example, "Departments" (without
   the quotation marks)) to make it easier to sort the directory.

4. Click the Group By tab and click the field by which you want to organize the
   view.

5. Click the Permissions tab, and then under Search, grant permissions for the
   group that will use this view.

6. Click the Domain Users group if you want all users on your Exchange Server
   messaging system to see the updated view.

7. Click Apply, and then click OK.

You have created containers in the Address List in Outlook that match your
current organizational structure, but users can still view the original
containers. You can hide the original containers so that the only containers
viewable through Outlook are the Global Address List and the new Address Book
Views. To hide the original containers, follow these steps:

1. In the Directory Service Site Configuration object, click Properties, and
   then configure an anonymous account.

   For additional information, click the article number below to view the article
   in the Microsoft Knowledge Base:

   Q182902 How To Set Up Container Level Search Control

2. To locate the Directory Service Site Configuration object, follow these
   steps:

   a. Click to expand the Site object, and then click to expand the
      Configuration object.

   b. Click the "Directory Service Site Configuration" object.

3. In the Administrator program, click Options on the Tools menu.

4. On the Permissions tab, click to select "Display rights for roles on
   permissions page".

5. In the Administrator program, click the Site object, and then click
   Properties on the File menu.

6. Click the Permissions tab.

7. Grant Search permissions for a Windows NT account that is not assigned to a
   user. Do not remove any permissions from this service account.

8. Follow the same process on the configuration container.

Additional query words:

======================================================================
Keywords          : exc55 
Technology        : kbExchangeSearch kbExchange550 kbZNotKeyword2
Version           : winnt:5.5
Issue type        : kbhowto

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2002.