Many times people often play with permissions when they should not. One common mistake administrators make is that they remove the Authenticated Users from the security mask on the Address Lists Container thus hiding it from everybody. Once this is done
