The Active Directory PhoneBook tool is a standard application in eMailSignature. You can use it to view all users in the Active Directory and browse through their contact information as listed in the basic fields in AD.
By default, you can view AD information, but when the module is activated, you can also use the PhoneBook to update and maintain user information.
The PhoneBook can be used by non-technical employee.
How to use the PhoneBook to update mobile number in Active Directory:
Viewing contact information in the PhoneBook
Open the PhoneBook. Then select the letter to view the list of users whose user name starts with that letter:
Note: The list is sorted by display name. You might experience that it is sorted by last name. It is not possible to change the sorting order.
Updating contact information in AD (permissions required)
If you have the AD-Update module activated, you can change the user information directly from the PhoneBook tool. Simply choose the user you want to maintain information for, and write the data in the respective fields. Then click 'Save' to propagate the updated information to the Active Directory.
Note: You must have the appropriate permissions to edit AD information. By default, the owner or member of the Administrators group can make changes to AD information. If you do not have sufficient permissions, you can add them as described in the following section.
Modifying default AD permissions for the PhoneBook
If you do not have sufficient permissions to edit AD information, you can add them as follows:
Watch how-to video > Windows Server 2008: Active Directory's delegation of control wizard
- Open the Start menu > Programs > Administrative Tools > Active Directory Users and Computers.
- Right-click on the domain root and select Delegate Control from the pop-up context menu.
The Delegation of Control Wizard window opens. Click Next to begin the wizard.
- Select the groups to which you want to apply the security changes. When you have selected the group that you want to work with, click Next.
- The next screen allows you to delegate some common tasks, such as the ability to manage group policies or user accounts or the ability to reset passwords.
In this case, select the Create a Custom Task to Delegate radio button and click Next.
- In the next screen, indicate the scope of the task to be delegated. Select the Only the Following Objects radio button.
When you do, the area below the radio buttons will become accessible. Select the User Objects check box, and click Next.
- The next screen contains a list of all the specific permissions you can grant to user objects. Select the Write All Properties check box.
You can also set separate permissions based on the individual tabs within the Users Properties sheet.
For example, you could grant the group permission to write general information, but not personal information. Click Next.
- The last screen in the wizard summarizes the changes you are about to make. It also gives you one last chance to go back and make corrections.
Click the Finish button, to submit the changes.
Verifying the granted permissions
To check that the permissions are applied correctly, proceed as follows:
- In the Active Directory Users and Computers window, open the View menu, and select Advanced Features. Right-click your group, and select Properties from the context menu.
- Open the Security tab and click Advanced. Advanced Security Settings window opens.
- On the Permissions tab, verify the permission entries that apply to your group:
The granted permissions should be sufficient for the users of this group to modify user information in the Active Directory using the PhoneBook tool.