My CEO wants to be able to see the User Firstname, Lastname, Home phone, work phone, mobile phone and smtp email address when he does a 'lookup' on his Blackberry device. This information must be hidden from most employees except certain HR staff that will maintain the information. My initial thought is to populate AD with the information, then create a Global Address list in Exchange 2003 restricted to only those allowed to edit and view the data. Is this possible? Has anyone had experience with a situation like I've described? Help! Jimme

I'm hoping this makes the project a bit more understandable: In English: I want to hide all user information from the GAL Except LEVEL5 SECURITY WHO CAN SEE everything AND LEVEL4 SECURITY WHO CAN SEE First name, last name, work phone, email address, mobile phone, home phone (view only) AND LEVEL3 SECURITY WHO CAN SEE First name, last name, work phone, email address. mobile phone (view only) AND LEVEL1 WHO CAN SEE First name, last name, work phone, email address (view only) Is this even possible? Thanks, Jimme

Not possible. You can't restrict the viewing of the content in this way. The most common way that this information is stored and restricted access is via public folders. With the latest version of BES you can sync a public folder. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

Thank you. Actually, my first thought was Public Folders, but my CIO's face went pale when I said "public". LOL Then I thought about using AD information. Since I'll be upgrading BES to 5.x soon to support X2010, Public Folders looks like the best solution. Hopefully MS will not drop support entirely with the next incarnation of Exchange. Again, thanks! Jimme