We are looking to populate our "Telephone Number" field in Active Directory with afterhours contact information for a small subset of our users. However, we don’t want this information visible to everyone in Active Directory. Is it possible to restrict access to view such attributes via GPO or group membership or the like? I have searched several forums but haven’t come across an answer just yet. The vast majority of our users would be viewing such information through Outlook 2010 or by synching their phones with Exchange.
Any insight on how this might be achieved would be greatly appreciated.