Link to home
Start Free TrialLog in
Avatar of Chadwhite
Chadwhite

asked on

GAL ... visibility of user info to end users ...

We would like to populate AD with employee information and make it the central repository for user info for our organization. Is there any way to restrict the fields that are displayed to users through the GAL? For example if we wanted to store all info for employees including home phone and address in AD is there a way to prevent that from being displayed when a user does a lookup in outlook. We don't want just anyone to have access to the information.

Thanks
Avatar of Jejin Joseph
Jejin Joseph
Flag of United Arab Emirates image

By default "everyone" has read access to everyone elses general attributes, i.e, the attributes which are shown in outlook properties. If you dont want anyone else to see it you probable could deny access to these attributes to the everyone group.

Althought i dont think that would be a recomended way of doing it . I understad that you want to use AD as a repository without giving everyone access to these details. I would recomended that you extend the schema and add attributes for the details you want to add and them populate them. This way these attributes wont appear anywhere and your applicaiton can edit/display these attrtibues.
ASKER CERTIFIED SOLUTION
Avatar of xqs
xqs
Flag of Netherlands image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial