I have setup a hosted exchange environment according to the Virtual Organizations and Address List Segregation White Paper.  Everything is working perfect except that if I try to setup the administrator in Outlook, I get the error the name cannot be resolved.   I can also manually create a new user in EMC and I am unable to resolve that name in outlook also.

When I originally did the setup, I set the default global address list to deny for authenticated users.  I later went back and renamed that and created a new default global address list and set deny permissions just to the hosted group.  I can see the default global address list in web outlook, so I know all the users are in there, it's just outlook will not resolve the name.

I must just be missing something simple.  Any help would be greatly appreciated.  Thanks.

I have the same problem.

Does anyone have a solution or at least something to try? 

Populate administrator's  user object attribute showInAddresssLists with proper AL/GAL.

Thanks, I checked it but it is already populated.  Under the showinadressbook attribute  it has the Default Global Address List.  Anything else you can think of to try?

Default AL must be listed as well. User must have read access to both address lists objects.

I dont think I have just a Default AL, Default Global Address List is all I see.  Can you explain a little more on where/what that is?  Is that something created by default or do I need to create it manually? 

Sorry, not "Default AL". It should be address list "All Users".

I have deleted that address list.  It is one of the steps in the article Configuring Virtual Organizations and Address List Segregation in Exchange 2007. 

remove-addresslist "All Contacts"
remove-addresslist "All Groups"
remove-addresslist "All Rooms"
remove-addresslist "All Users"
remove-addresslist "Public Folders" 

How can I recreate that with the correct permissions so not all users see that address list? 

Is this online mode or offline mode?