What is the most recommended tool/solution for allowing users to effectively
update their own Active Directory user information (all informational
fields) that is displayed in the GAL? Thank you.

*note: All 2003 environment (AD, Exchange and Outlook).

Re: Allowing users to update their own AD user information displayed in GAL? by Ed

Ed
Thu Aug 14 22:01:03 PDT 2008

I recommend you don't!
--
Ed "McLovin" Crowley
Female Booty Investigator Department


"Barkley Bees" <barkbees@nomail.com> wrote in message
news:OLSKfHp$IHA.4536@TK2MSFTNGP05.phx.gbl...
> What is the most recommended tool/solution for allowing users to
> effectively update their own Active Directory user information (all
> informational fields) that is displayed in the GAL? Thank you.
>
> *note: All 2003 environment (AD, Exchange and Outlook).
>



Re: Allowing users to update their own AD user information displayed in GAL? by Meinolf

Meinolf
Thu Aug 14 23:22:25 PDT 2008

Hello barkley,

I would not let the users play around, you have more work after that.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> What is the most recommended tool/solution for allowing users to
> effectively update their own Active Directory user information (all
> informational fields) that is displayed in the GAL? Thank you.
>
> *note: All 2003 environment (AD, Exchange and Outlook).
>



Re: Allowing users to update their own AD user information displayed by Jamestechman

Jamestechman
Thu Aug 14 23:52:28 PDT 2008

Coupl options;

Third party tool
http://www.directory-update.com/

Galmod (not supported)
http://www.amset.info/outlook/galmod.asp

Free script
Web GAL Mod Com object - Allow a staff member to modify phone numbers
of all people in their department/office.
http://www.outlookexchange.com/articles/glenscales/galmdcom.asp

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com


On Aug 15, 12:46=A0am, "Barkley Bees" <barkb...@nomail.com> wrote:
> What is the most recommended tool/solution for allowing users to effectiv=
ely
> update their own Active Directory user information (all informational
> fields) that is displayed in the GAL? Thank you.
>
> *note: All 2003 environment (AD, Exchange and Outlook).


Re: Allowing users to update their own AD user information displayed in GAL? by Martin

Martin
Fri Aug 15 05:06:31 PDT 2008

I would check this out
http://www.directory-update.com/


"Barkley Bees" <barkbees@nomail.com> wrote in message
news:OLSKfHp$IHA.4536@TK2MSFTNGP05.phx.gbl...
> What is the most recommended tool/solution for allowing users to
> effectively update their own Active Directory user information (all
> informational fields) that is displayed in the GAL? Thank you.
>
> *note: All 2003 environment (AD, Exchange and Outlook).
>


Re: Allowing users to update their own AD user information displayed in GAL? by Jorge

Jorge
Sun Aug 17 13:37:53 PDT 2008

why not?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Ed Crowley [MVP]" <curspice@nospam.net> wrote in message
news:uFi$rPp$IHA.6132@TK2MSFTNGP04.phx.gbl...
>I recommend you don't!
> --
> Ed "McLovin" Crowley
> Female Booty Investigator Department
>
>
> "Barkley Bees" <barkbees@nomail.com> wrote in message
> news:OLSKfHp$IHA.4536@TK2MSFTNGP05.phx.gbl...
>> What is the most recommended tool/solution for allowing users to
>> effectively update their own Active Directory user information (all
>> informational fields) that is displayed in the GAL? Thank you.
>>
>> *note: All 2003 environment (AD, Exchange and Outlook).
>>
>
>


Re: Allowing users to update their own AD user information displayed in GAL? by Jorge

Jorge
Sun Aug 17 14:19:21 PDT 2008

Hum. In one hand they can maintain their own information updated with the
most recently information. In the other hand hey can cheat data or their
record :D.
Assuming that internal policy states that the user must update its own
information, you'll know how cheated :P.
Of course you always have auditing to check who did it, tracking that
information can be "PITA"


--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services


Re: Allowing users to update their own AD user information displayed in GAL? by Ed

Ed
Sun Aug 17 17:16:54 PDT 2008

Standardization is a nightmare.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"Jorge de Almeida Pinto [MVP - DS]"
<SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
news:OlsRikKAJHA.1228@TK2MSFTNGP02.phx.gbl...
> why not?
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>
> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> ------------------------------------------------------------------------------------------
> * How to ask a question --> http://support.microsoft.com/?id=555375
> ------------------------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no
> rights!
> * Always test ANY suggestion in a test environment before implementing!
> ------------------------------------------------------------------------------------------
> #################################################
> #################################################
> ------------------------------------------------------------------------------------------
> "Ed Crowley [MVP]" <curspice@nospam.net> wrote in message
> news:uFi$rPp$IHA.6132@TK2MSFTNGP04.phx.gbl...
>>I recommend you don't!
>> --
>> Ed "McLovin" Crowley
>> Female Booty Investigator Department
>>
>>
>> "Barkley Bees" <barkbees@nomail.com> wrote in message
>> news:OLSKfHp$IHA.4536@TK2MSFTNGP05.phx.gbl...
>>> What is the most recommended tool/solution for allowing users to
>>> effectively update their own Active Directory user information (all
>>> informational fields) that is displayed in the GAL? Thank you.
>>>
>>> *note: All 2003 environment (AD, Exchange and Outlook).
>>>
>>
>>
>



Re: Allowing users to update their own AD user information displayed in GAL? by Rich

Rich
Sun Aug 17 19:59:32 PDT 2008

On Sun, 17 Aug 2008 17:16:54 -0700, "Ed Crowley [MVP]"
<curspice@nospam.net> wrote:

>Standardization is a nightmare.

Anarchy is not?
---
Rich Matheisen
MCSE+I, Exchange MVP

Re: Allowing users to update their own AD user information displayed in GAL? by Ed

Ed
Sun Aug 17 20:50:08 PDT 2008

We're saying the same thing, I just said it crappy. I should have said that
achieving standardization is a nightmare when everyone enters his or her own
data.

The best way to populate data in AD is through synchronization from human
resources and other systems where the data is properly controlled and
maintained.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:0cpha4ph92185qc80l0m5rnmjqcgk6est8@4ax.com...
> On Sun, 17 Aug 2008 17:16:54 -0700, "Ed Crowley [MVP]"
> <curspice@nospam.net> wrote:
>
>>Standardization is a nightmare.
>
> Anarchy is not?
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP



Re: Allowing users to update their own AD user information displayed in GAL? by Jorge

Jorge
Mon Aug 18 09:26:36 PDT 2008

chaos is better! ;-)

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:0cpha4ph92185qc80l0m5rnmjqcgk6est8@4ax.com...
> On Sun, 17 Aug 2008 17:16:54 -0700, "Ed Crowley [MVP]"
> <curspice@nospam.net> wrote:
>
>>Standardization is a nightmare.
>
> Anarchy is not?
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP


Re: Allowing users to update their own AD user information displayed in GAL? by Jorge

Jorge
Mon Aug 18 09:29:12 PDT 2008

even the HR people can make a mess of it

it depends on what is import for you for users not to screw it up or what
you do not care about. A way to mitigate a risk is to create some kind of
self service web page that does not checks and also provides informational
examples of possible entries

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Ed Crowley [MVP]" <curspice@nospam.net> wrote in message
news:u5UMDWOAJHA.1748@TK2MSFTNGP02.phx.gbl...
> We're saying the same thing, I just said it crappy. I should have said
> that achieving standardization is a nightmare when everyone enters his or
> her own data.
>
> The best way to populate data in AD is through synchronization from human
> resources and other systems where the data is properly controlled and
> maintained.
> --
> Ed Crowley MVP
> "There are seldom good technological solutions to behavioral problems."
> .
>
> "Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
> news:0cpha4ph92185qc80l0m5rnmjqcgk6est8@4ax.com...
>> On Sun, 17 Aug 2008 17:16:54 -0700, "Ed Crowley [MVP]"
>> <curspice@nospam.net> wrote:
>>
>>>Standardization is a nightmare.
>>
>> Anarchy is not?
>> ---
>> Rich Matheisen
>> MCSE+I, Exchange MVP
>
>


Re: Allowing users to update their own AD user information displayed in GAL? by Ed

Ed
Mon Aug 18 11:42:36 PDT 2008

Yeah, but if the HR people do make a mess of it it's their problem.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"Jorge de Almeida Pinto [MVP - DS]"
<SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
news:O$ooX%23UAJHA.4064@TK2MSFTNGP02.phx.gbl...
> even the HR people can make a mess of it
>
> it depends on what is import for you for users not to screw it up or what
> you do not care about. A way to mitigate a risk is to create some kind of
> self service web page that does not checks and also provides informational
> examples of possible entries
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>
> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> ------------------------------------------------------------------------------------------
> * How to ask a question --> http://support.microsoft.com/?id=555375
> ------------------------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no
> rights!
> * Always test ANY suggestion in a test environment before implementing!
> ------------------------------------------------------------------------------------------
> #################################################
> #################################################
> ------------------------------------------------------------------------------------------
> "Ed Crowley [MVP]" <curspice@nospam.net> wrote in message
> news:u5UMDWOAJHA.1748@TK2MSFTNGP02.phx.gbl...
>> We're saying the same thing, I just said it crappy. I should have said
>> that achieving standardization is a nightmare when everyone enters his or
>> her own data.
>>
>> The best way to populate data in AD is through synchronization from human
>> resources and other systems where the data is properly controlled and
>> maintained.
>> --
>> Ed Crowley MVP
>> "There are seldom good technological solutions to behavioral problems."
>> .
>>
>> "Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
>> news:0cpha4ph92185qc80l0m5rnmjqcgk6est8@4ax.com...
>>> On Sun, 17 Aug 2008 17:16:54 -0700, "Ed Crowley [MVP]"
>>> <curspice@nospam.net> wrote:
>>>
>>>>Standardization is a nightmare.
>>>
>>> Anarchy is not?
>>> ---
>>> Rich Matheisen
>>> MCSE+I, Exchange MVP
>>
>>
>



Re: Allowing users to update their own AD user information displayed in GAL? by Rich

Rich
Mon Aug 18 17:37:23 PDT 2008

On Mon, 18 Aug 2008 18:29:12 +0200, "Jorge de Almeida Pinto [MVP -
DS]" <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote:

>even the HR people can make a mess of it

True, but there are fewer of them and it's not as difficult to get
them to conform.

>it depends on what is import for you for users not to screw it up or what
>you do not care about.

What you don't care about doesn't belong in a directory.

>A way to mitigate a risk is to create some kind of
>self service web page that does not checks and also provides informational
>examples of possible entries

If you don't care there's no risk, is there?

If, at some time in the future you/do/ decide to care you'll have a
big cleanup job to undertake.
---
Rich Matheisen
MCSE+I, Exchange MVP

Re: Allowing users to update their own AD user information displayed in GAL? by Ace

Ace
Thu Aug 21 17:57:13 PDT 2008


"Ed Crowley [MVP]" <curspice@nospam.net> wrote in message
news:uHX9vIWAJHA.1180@TK2MSFTNGP04.phx.gbl...
> Yeah, but if the HR people do make a mess of it it's their problem.
> --
> Ed Crowley MVP


I agree. What we do in one large corp I work at is HR submits an employee
initiation form to IT security (AD folks) and they create the user and
populate data based on SOP. If any changes are required, HR or the user
submits a service request, it's evaluated for viability and need, and
reacted on whether it gets updated or denied, once again based on SOP.

Standardization, consistency and central control all based on SOP.

--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations


Re: Allowing users to update their own AD user information displayed in GAL? by Jorge

Jorge
Fri Aug 22 00:28:47 PDT 2008

is true. but it also depends on what you care about being consistent,etc..
If you do not care about mobile phone numbers you can let the user do that
him/herself.

I agree if it would a name change you would have to submit to HR or someone
to validate (e.g. when someone gets married and because of that the name
changes and the person wants to use that name)


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Ace Fekay [MVP Direcrtory Services]" <firstnamelastname@hotmail.com> wrote
in message news:571E7D0E-F77C-4E3C-9C8E-D5F0FD626149@microsoft.com...
>
> "Ed Crowley [MVP]" <curspice@nospam.net> wrote in message
> news:uHX9vIWAJHA.1180@TK2MSFTNGP04.phx.gbl...
>> Yeah, but if the HR people do make a mess of it it's their problem.
>> --
>> Ed Crowley MVP
>
>
> I agree. What we do in one large corp I work at is HR submits an employee
> initiation form to IT security (AD folks) and they create the user and
> populate data based on SOP. If any changes are required, HR or the user
> submits a service request, it's evaluated for viability and need, and
> reacted on whether it gets updated or denied, once again based on SOP.
>
> Standardization, consistency and central control all based on SOP.
>
> --
> Regards,
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
> MVP Microsoft MVP - Directory Services
> Microsoft Certified Trainer
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Infinite Diversities in Infinite Combinations
>


Re: Allowing users to update their own AD user information displayed in GAL? by Ace

Ace
Fri Aug 22 04:46:22 PDT 2008


"Jorge de Almeida Pinto [MVP - DS]"
<SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
news:%237D2TjCBJHA.5316@TK2MSFTNGP04.phx.gbl...
> is true. but it also depends on what you care about being consistent,etc..
> If you do not care about mobile phone numbers you can let the user do
> that him/herself.
>
> I agree if it would a name change you would have to submit to HR or
> someone to validate (e.g. when someone gets married and because of that
> the name changes and the person wants to use that name)

Even mobile #s. It's a strict shop. Due to the nature of the business, there
are some fed guidelines that must be followed. I'm not saying a mobile #
would fall under such scrutiny, but without saying much further, they're
requirements are tight.


Re: Allowing users to update their own AD user information displayed in GAL? by Jorge

Jorge
Fri Aug 22 13:47:05 PDT 2008

maybe for that company..
I have seen company that allow to update all kinds of things.

Not every company is the same

It is all about requirements and company policies (or what is important or
not)

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Ace Fekay [MVP Direcrtory Services]" <firstnamelastname@hotmail.com> wrote
in message news:6B3AB43D-331F-4A7A-A0B4-005FF9280565@microsoft.com...
>
> "Jorge de Almeida Pinto [MVP - DS]"
> <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
> news:%237D2TjCBJHA.5316@TK2MSFTNGP04.phx.gbl...
>> is true. but it also depends on what you care about being
>> consistent,etc.. If you do not care about mobile phone numbers you can
>> let the user do that him/herself.
>>
>> I agree if it would a name change you would have to submit to HR or
>> someone to validate (e.g. when someone gets married and because of that
>> the name changes and the person wants to use that name)
>
> Even mobile #s. It's a strict shop. Due to the nature of the business,
> there are some fed guidelines that must be followed. I'm not saying a
> mobile # would fall under such scrutiny, but without saying much further,
> they're requirements are tight.
>


RE: Allowing users to update their own AD user information displayed i by GeorgeGraham

GeorgeGraham
Wed Oct 22 18:09:01 PDT 2008

Don't waste your time on expensive solutions. The best I have found so far
is this:

http://www.turbo-it.com

It is called SMOP and allows users to reset their own passwords-they have to
do a simple registration and answer some questions and then they get to
unlock their own accounts and change their own passwords - one bonus this
thing has is that it allows to change passwords also from web based form.

"Barkley Bees" wrote:

> What is the most recommended tool/solution for allowing users to effectively
> update their own Active Directory user information (all informational
> fields) that is displayed in the GAL? Thank you.
>
> *note: All 2003 environment (AD, Exchange and Outlook).
>
>
>