Hiding Mobile Number Attributes from Outlook GAL for Selected Users

Umar Khan 21 Reputation points
2023-01-18T07:16:26.5666667+00:00

Hello everyone,

We have a requirement to hide active directory attribute mobile number from Outlook address book for selected users only.

One solution we have found so far is to deny permissions to read mobile number on that user object on active directory. It seems to be working only when denying permission for Authenticated Users. We still want some security groups (admins / service desk) to view the same attributes. User mobile number still appears if all other security groups are denied permissions.

Any other work around would be highly appreciated.

Exchange | Exchange Server | Other
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Exchange | Exchange Server | Management
{count} votes

3 answers

Sort by: Most helpful
  1. Thameur-BOURBITA 36,261 Reputation points Moderator
    2023-01-18T09:29:00.9133333+00:00

    Hi

    Did you try to create a GAL custom tempate for GAL without phone number field as mentioned in the following link : Customize details templates

    Please don't forget to accept helpful answer

    0 comments No comments

  2. Jame Xu-MSFT 4,191 Reputation points
    2023-01-19T07:51:02.13+00:00

    Hi @Umar Khan ,

    Agree with @Thameur-BOURBITA , you could try to create a custom template. Here is a similar case: Hide mobile number in GAL?


    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  3. Limitless Technology 44,766 Reputation points
    2023-01-19T15:07:58.3566667+00:00

    Hello,

    My suggestion would be to move the Mobile Number attribute to Extended Atribute (for example "extensionAttribute1") as GAL will not look into Extended Attributes. I propose a simple script:

    $users = get-aduser -Filter * -Properties *|Where-Object {$_.MobilePhone -ne $null }| Select-Object Samaccountname,MobilePhone

    foreach($user in $users)

    {

    set-aduser -identity $user.Samaccountname -add @{otherMobile=$user.extensionAttribute1}

    }

    --If the reply is helpful, please Upvote and Accept as answer--


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.