I have found a few threads on this topic but none have answered the question I have on hiding users in the corporate directory. My issue is very similar to the one posted in this thread.
We are running CCM 4.2(1). We are AD integrated. The current search results for the corporate directory pull both system AD accounts, Admin accounts, user accounts with no phone entry, etc.
I was wondering if there are any other ideas out there for this post. I would like to hide all those "names" that don't have a phone number. This includes both system accounts and actual user accounts. Because we are looking at user accounts as well, putting a symbol before the first name to limit the search results is not practical when you are talking about several hundred names, names that change on a regular basis. Instead I would like to limit the search to only those entries that have a value in the telephone field. Only those users with a valid phone extension have the entry entered into their AD account and thus should be the only results returned in the corporate directory lookup.
Just put on the description field: "ciscoprivateuser". That user will no longer appear on corporate directory list.
This is great information for system accounts. However this becomes very complicated when we are talking about actual users. In all cases the description field is used for other info such as an office billing code. Since other systems key on this field we cannot use it for user accounts.
Any other ideas?
Here's another option:
1. In AD, right-click the user account and go to properties.
2. Click the Security tab.
3. Under "Group or user names:", click the account that you use for AD integration.
4. Check the Deny checkbox for Full Control.
5. Click Apply and OK.
This will deny CCM the ability to see this user. You could also do this at the OU level to deny access to a group of users.
Hope this helps. If so, please rate the post.
Thanks for the post Brandon,
As with the other post listed, I still need callmanager to be able to see the users. I only want to remove them from the corporate directory.
This seems to make sense and I will give this a try when I'm on site next. Would this be a suitable method for CCM6.0(1) where we are performing a synchronization rather than a true integration? Not sure whether an error message would be generated when performing a Dir synch if some users are inaccessible, do you have a view on this at all?
That's a very good question. I haven't tested this with CUCM 6 so I can't say for certain. I would expect the behavior to be the same, but, as you say, CUCM 6 uses synchronization as opposed to integration. If you test this out, let me know how it goes.
Just to let you know, none of the methods we have discussed to date worked with CUCM 6.0(1). I have decided to take a more pragmatic approach and have suggested that any user / template account the customer wishes to hide in the CUCM corporate directory should be moved to an alternative ou / container.
Please let me know if you come up with another work around.
Any joy on this one yet?
We need to hide users from Corporate Directory too but need CCM to see them. We're using CCM6 and 7.
On CUCM 5.x and above, you need to apply the LDAP search filter via AXL interface.
Sorry, no GUI. So you have to do some programming work.
See attached file for details.
Kinda late on this post but you may want to try removing the last name of the user and include the full name in the First Name field of AD. Doing so prevents users from appearing in corporate directory.