5 pts.
26,465 pts.

Answer Wiki:
By default noone has the rights to do this unless they have rights to Active Directory. And even then, when you pull up the GAL and double-click a name, none of the fields are editible from there. These fields are generated from Active Directory and are view-only from the GAL.

==========================

Make sure there is no AD delegation to general user groups, and check the security settings on your user folders in AD.

Remove non-administrative users from groups which have elevated priviledges like the domain admins group and the administrator group.
Last Wiki Answer Submitted:  Jan 30, 2009  0:12 AM (GMT)  by  Mshen   26,465 pts.
Latest Answer Wiki Contributors:  Technochic   56,930 pts.
To see other answers submitted to the Answer Wiki View Answer History.
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _