We are an educational institution, and so are constrained by privacy regulations from revealing email addresses for any student who requests they not be divulged. While there is an exclusion for faculty and staff viewing them, it does not seem to extend to students (other students may not view the address if the restriction is requested). Bottom line, I'd like to hide certain Exchange addresses from the students, without hiding them from the rest of the college. Students are on server2, faculty and staff on server1, all in the same exchange site, two different domains, obviously different OUs. Can I restrict viewing the Global Address list from all students, without going into the frighteningly complex web of security permissions on the GAB? Can I hide a user from a non-system address book and leave them in the GAB? Should I make a seperate OU for the students who wish to be hidden? Is there a better approach?