AD PhoneBook
The Active Directory
PhoneBook tool is a standard application in
eMailSignature. You can use it to view all users in the
Active Directory and browse through their contact information as listed in the basic fields in AD.
By default, you can view AD information, but when the module is activated, you can also use the PhoneBook to update and maintain user information.
The PhoneBook can be managed by non-technical employee.
To open the PhoneBook, open either the 'Modules' tab and click 'AD PhoneBook' in the 'Active Directory' toolbar:
Or open the 'Signatures' tab and click 'PhoneBook' in the 'Tools' tab:
The PhoneBook window opens.
Viewing contact information in the PhoneBook
Open the
PhoneBook. Then select the letter to view the list of users whose user name starts with that letter:
Note: The list is sorted by display name. You might experience that it is sorted by last name. It is not possible to change the sorting order.
Click on a user name to view the user's contact details.
Updating contact information in AD (permissions required)
If you have licensed the full
Enterprise Edition of eMailSignature or separately the Active Directory module, you can change the user information directly from the
PhoneBook tool. Simply choose the user you want to maintain information for, and write the data in the respective fields. Then click 'Save' to propagate the updated information to the
Active Directory.
Note: You must have the appropriate permissions to edit AD information. By default, the owner or member of the Administrators group can make changes to AD information. If you do not have sufficient permissions, you can add them as described in the following section.
Modifying default AD permissions for the PhoneBook (Windows Server 2003)
If you do not have sufficient permissions to edit AD information, you can add them as follows:
- Open the Start menu > Programs > Administrative Tools > Active Directory Users and Computers.
- Right-click on the domain root and select 'Delegate Control' from the pop-up context menu.
The Delegation of Control Wizard window opens. Click 'Next' to begin the wizard. - Select the users or groups to which you want to apply the security changes. As with all security-related issues, you should apply permissions on a group basis. Therefore, it is advisable to create a group, e.g. ChangeUserInfo, that will be allowed to change AD information. When you have selected the group that you want to work with, click 'Next'.
- The next screen allows you to delegate some common tasks, such as the ability to manage group policies or user accounts or the ability to reset passwords. In this case, select the 'Create a Custom Task to Delegate' radio button and click 'Next'.
- In the next screen, indicate the scope of the task to be delegated. Select the 'Only the Following Objects' radio button. When you do, the area below the radio buttons will become accessible. Select the 'User Objects' check box, and click 'Next'.
- The next screen contains a list of all the specific permissions you can grant to user objects. Select the 'Write All Properties' check box. You can also set separate permissions based on the individual tabs within the Users Properties sheet. For example, you could grant the group permission to write general information, but not personal information. Click 'Next'.
- The last screen in the wizard summarizes the changes you are about to make. It also gives you one last chance to go back and make corrections. Click the 'Finish' button, to submit the changes.
Verifying the granted permissions
To check that the permissions are applied correctly, proceed as follows:
- In the Active Directory Users and Computers window, open the View menu, and select 'Advanced Features'. Navigate to and right-click your group, and select 'Properties' from the context menu.
- Open the Security tab and click Advanced. Advanced Security Settings window opens.
- On the Permissions tab, verify the permission entries that apply to your group:
The granted permissions should be sufficient for the users of this group to modify user information in the Active Directory using the PhoneBook tool.
Up to
Active Directory Module for eMailSignatureBack to
Introduction to Active Directory Module for eMailSignatureForward to
AD Update