Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to restrict the visibility of certain Exchange Distribution Groups in the GAL.

Or more specifically, I want to create individual groups that are visible only to particular AD groups?

Let say I have a group called "Sales"

How can I create some specific DGs that are only visilbe to the Sales team?

Is this done through security rights on the DG object? If so, what should I be adding/removing?


edit: Sorry, Exchange 2007.

share|improve this question
Which version of Exchange are you using? – Wesley Nov 5 '09 at 1:04
up vote 4 down vote accepted

Hopefully you're running Exchange 2007.

In an Exchange 2007 environment you're talking about "Address List Segregation". The canonical paper from Microsoft describing what you want is

Officially, Microsoft says that there is no "suppport" for doing this in an Exchange 2003 environment (see Worse, it looks like Microsoft has pulled most of the content related to doing this with Exchange 2003 (, for example).

It's been years since I've done this with Exchange 2003 (and, even then, it was in a lab), and I'd be loathe to give you advice w/o mocking it up in a lab first. There's some information here for Exchange 2003, and it all looks like what I remember, but I'd be awfully careful with trying that on a production AD.

share|improve this answer
Thanks for the link, I'll have a read of it now. – LukeR Nov 5 '09 at 6:43

Are you referring to Distribution Groups in ADUC or Address Lists in ESM?

To add to what Evan said: Doing this in Exchange 2003 is not officially supported but it's pretty simple to set up. We host email for about 50 companies using Exchange 2003 and we work with this all the time. Segregated Address Lists, Public Folders, Recipient Policies, etc. I didn't want to assume you were referring to Address Lists in your original question because you stated "Distribution Lists" and technically there's no such thing. There are Address Lists and Distribution Groups. I didn't want to post an answer without knowing exactly what you were referring to. The following article is what we used to get started with shared hosting with Exchange 2003 and it should give you the jist of how to set up, segregate, and secure your Address Lists.

share|improve this answer
Good point on the terminology. I'll updte my post accordingly. – LukeR Nov 5 '09 at 6:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.