Filtering Contacts from the Address Book

Last night I was working with my friend and fellow UC architect, Peter Pawlak, on a customer design item.  This particular customer is a subsidiary of a larger organization.  The subsidiary is deploying OCS but the parent company is not.  Not a problem since each of them have their own forests.  However, the parent company pushes down it's users as contacts via an LDAP replication tool.  The issue was that the subsidiary is deploying telephony integration in their OCS deployment and the contacts that are coming from the parent company include phone numbers that are not formatted in such a way that they could be accounted for in the normalization rules (too many different formats).  There were also duplicate phone numbers and other similar issues.  In the end it was decided that the best plan of action was to simply exclude these contacts from the address book altogether.

To do this we used address book filtering.  If you aren't familar with address book filtering, check the section around Table 19 of the OCS Technical Reference (page 78).  What we had to do was find an attribute that did not exist for contacts but did exist for users and groups.  We settled on SAMAccountName and Peter made the appropriate changes to the AbUserEntry table in SQL, excluding objects that do not have a SAMAccountName attribute by setting the 0x8000 flag for that attribute.  This ensured that all users and groups were still included in the ABS.

Unfortunately the address book filtering capability for OCS is very basic, so you can't do things like string comparisons or value matching.  There is a resource kit tool that provides a UI for updating the AbUserEntry table, but I have seen that tool cause problems so I don't recommend using it unless you are extremely uncomfortable making the changes in SQL yourself (make sure to take a backup first if you do this in a production environment!).

Hopefully MS will consider more advanced filtering capabilities as this is a common request from customers.


Posted Jun 12 2008, 09:04 AM by Mike Stacy
Filed under: , , ,

Comments

Michael wrote re: Filtering Contacts from the Address Book
on 06-26-2008 14:34

This is a bit off topic, but I saw your post on TechNet reagarding not using a reverse proxy. I understand you can do this, but according to others you would not get Adddress Book downloads, DL expansion or meeting content? We're putting an Edge server in our DMZ (Cisco firewall). Is there a way to configure the firewall to allow these things to work?

Thanks

Mike Stacy wrote re: Filtering Contacts from the Address Book
on 06-27-2008 0:29

Michael,

I believe my post indicated that you can use a standard NAT firewall to publish the web components but that a reverse proxy is preferred for security reasons.  If you do not have access to a reverse proxy and/or are comfortable with the limited security you get with a NAT solution, you can simply NAT a public IP to the private IP of your web components server.

Mike

Filtering Contacts for OCS 2007 - Connectivity wrote Filtering Contacts for OCS 2007 - Connectivity
on 06-30-2008 9:41

Pingback from  Filtering Contacts for OCS 2007 - Connectivity

Powered by Community Server (Non-Commercial Edition), by Telligent Systems