I have been asked to update our users with all their info including home phone numbers etc. However my company wants to restrict certain AD fields from being accessable by averyone. For example, Cetain managers when querying the global directory will be able to view home cell numbers and emergency numbers. The regular employees when doing a globals address lookup will not be able to see these home numbers.
Is there a way in AD or in group policies to do this