Exchange Online GAL

[yjgygyufgvfghfh]

Urgh so I've had an issue where a member of staff has added a student into an email chain as they have the same name as a staff member.

 

I've now been asked to remove students from the Global Address list and while I've managed to create a new one using Powershell, I can't for the life of me figure out how to make it default and remove the old one. Any ideas? This is what I've got so far:

 

 

New-GlobalAddressList -Name "School Default GAL" -RecipientFilter "DistinguishedName -eq '%OU=Staff%'"

[CyBeRkId2002]

Think you have posted this to the wrong forum... but I will try to answer this anyway!

 

There are several layers to this. By default everyone receives the Default GAL which includes everyone on the tenancy ... to my knowledge this cant be amended.

 

You can create your own GAL with whatever filter you like, but these need to then be assigned to an Address Book Policy (along with Room List, Address List). We script this (using powershell) to first assign a blank one (just as a belt and braces approach) then assign the correct one based upon Company, Department etc. Faffy but it works.

[Tys]

Do you use Salamander? It does this for us I believe

 

We still had this happening due to similar email addresses so we put a transport rule in to have all emails sent to a student by a staff member or external (with some exceptions) come to the IT team for approval first. A bit belt-and-braces, but has saved us a few times.

[Mr.Ben]

You'll break loads of functionality in Teams by removing students from the school GAL.

 

The solution we use is a mail tip that appears when the Student is being emailed to warn the member of staff.

 

GAL segregation does have legitimate use (we use it to segregate school address books so one school's students can't see another and governors can't see students), but here it's overkill and would cause more problems.

[3s-gtech]

I don’t remove them from the GAL, but I do use the hide from address lists functionality. Students can only be emailed by typing the full address.

 

This can be done in bulk with an AD attribute if you sync from on-prem and have Exchange attributes, or you’ll need to PS it.

[cheekycharly]

I thought all you did was go into 365 Admin side and turn this off? no?

[3s-gtech]

That’s the one, but in bulk that’s not going to happen - and it may be a synced attribute if you happen to have onsite Exchange too so will be read-only.

[yjgygyufgvfghfh]

You'll break loads of functionality in Teams by removing students from the school GAL.

 

The solution we use is a mail tip that appears when the Student is being emailed to warn the member of staff.

 

GAL segregation does have legitimate use (we use it to segregate school address books so one school's students can't see another and governors can't see students), but here it's overkill and would cause more problems.

MailTip is a great solution! I like that and I've got Salamander so they can script that for me. Think you're right about the potential issues, I also think a lot of staff struggle with the naming convention of student accounts so losing them from the address book would be a real pain.

 

I think I'll also get staff display names set to J Bloggs instead of Joe Bloggs to help make that distinction.

[cheekycharly]

I feel more and more lucky everyday with my 60 pupils and 40 staff.