We have 2 child domains each containing Exchange 2007. The global address list is populated with contact details of users from both child domains. I want to change this so that the GAL in child domain 1 can only see users from child domain 1, and the GAL in child domain 2 only shows users from child domain 2. I found a link explaining how to create a custom address list, add certain users, and set permissions via ADSIedit to deny a certain group. But I feel their must be a better way to do this. I dont want the extra admin of adding users to custom address lists every time I create a new user. Thanks for any suggestions.

Darn! Thanks for letting me know Simon.