Howdy All,
We are getting ready to deploy Exchange accounts to a lot more users in our organization and we would LIKE to be able use the fields in AD which allow for lots of information about each person to be put in (i.e. actually use it as a directory). Here is the catch, we only want certain people to be able to read most of it, i.e. if we put in home and mobile phone numbers into the user's AD profile, I don't want every exchange user having access to that, only the "Managers" global group. Do I need to be looking towards exchange specific settings or AD permissions on object attributes? If I start modifying the permissions on who can read atributes in AD and a user who is not authorized to read that attributes value, what would/will occur from an error message standpoint?
Mark
We are getting ready to deploy Exchange accounts to a lot more users in our organization and we would LIKE to be able use the fields in AD which allow for lots of information about each person to be put in (i.e. actually use it as a directory). Here is the catch, we only want certain people to be able to read most of it, i.e. if we put in home and mobile phone numbers into the user's AD profile, I don't want every exchange user having access to that, only the "Managers" global group. Do I need to be looking towards exchange specific settings or AD permissions on object attributes? If I start modifying the permissions on who can read atributes in AD and a user who is not authorized to read that attributes value, what would/will occur from an error message standpoint?
Mark