My way of figuring this out was by purchasing Inside Active Directory by Kouti & Seitsonen and reading Chapter 4 - it covers the subject well.
Basically you can assign permission to do what you ask.
| "Aaron I. Stahl" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 06/27/2003 09:48 AM
|
To: <[EMAIL PROTECTED]> cc: Subject: [ActiveDir] AD Question: Restricting Information From Users |
Hello all,
I have a question concerning viewing permissions in AD. We would like to add user information (home phone, cell, address, etc.) to AD, however we do not want all users to be able to see this information. We would like to restrict this information to Group Managers, Team Leaders, and so on (rights by user grouping). Currently if we add any phone numbers or other information it is viewable by any user. We are currently running a W2K network with all W2K clients (in a domain). If anyone has any information regarding this subject, your help would be greatly appreciated!
Regards,
Aaron I. Stahl
IT/IS Technician
Wilcox Professional Services, LLC
A Wilcox Associates, Inc. Company
www.wilcoxassociates.com
231.775.7755 x.181 (office)
231.775.3135 (fax)
231.846.0851 (cell)
