I wanted to specifically call out a white paper that Cathy mentioned in her February Documentation Update:
White Paper: Configuring Virtual Organizations and Address List Segregation in Exchange ...
Updated Jul 01, 2019
Version 2.0
Blog Post
1 MIN READ
Configuring Virtual Organizations and Address List Segregation in Exchange 2007
dyoung, you can look at this blog for your permissions: http://blogs.msdn.com/dgoldman/archive/2007/05/16/missing-permissions-on-the-address-lists-container-breaks-the-oab-generation-process.aspx
None of your permissions should have changed at all. You might want to consider turning up logging for MSExchangeAL and looking at your address list synchronization to see if the users are being added to their address list. You can also look at the showInAddressList attribute to see how many they are a part of and it should be the default offline address list and their company. If they make a query to the default it will fail and should roll over to their company. Make sure your groups are set up correctly.
None of your permissions should have changed at all. You might want to consider turning up logging for MSExchangeAL and looking at your address list synchronization to see if the users are being added to their address list. You can also look at the showInAddressList attribute to see how many they are a part of and it should be the default offline address list and their company. If they make a query to the default it will fail and should roll over to their company. Make sure your groups are set up correctly.