Available in the Exchange 2000 Resource Kit (or, do a Google search for GALMOD32.exe to look for a download site), the GAL Modify utility is a tool that allows your users to change their own GAL information. Obviously, use of this tool could be dangerous for some organisations, so use at your own risk.
Note that the tool works with Exchange 2003, too. Before users can use the tool, you need to give them rights to make changes to their own account details.
Follow these steps to allow users to update their own account details:
- Open Active Directory Users and Computers.
Right-click the name of your Domain, and, from the shortcut menu, choose Delegate Control.
Click Next.
Choose Add.
Select the special account Self (type "Self" into the "Enter object names to select box").
Click OK.
Click Next.
Choose the "Create a custom task to delegate" option button.
Click Next.
Choose the "Only the following objects in the folder" option button.
From the list, select "User objects".
Click Next.
Choose the "Property-specific" check box.
Set each attribute that you want your users to modify (or just read).
Click Next.
Click Finish.
The permissions on your user account determine the global address list entries that you can modify.
Domain Users can modify the following fields in their own global address book entries: Address, City , Business Phone Number, State, Fax, Home Phone Number, Mobile Phone Number, Notes, Office, Pager, and Zip Code.
Domain Administrators can modify the following fields: Assistant, Company, Country, Department, and Title.
Now, distribute GALMOD32.exe to your users. When they execute the tool, they will get a dialogue box where they can make changes to their account information.






Talkback
I have used GALMOD in the past and have found it inadequate for most organizations. There are a number of 3rd party applications that do a much better job of this and allow the user to do this through a web page instead of a Windows application.
The king of these applications is WebDir (http://www.imanami.com). It is the most flexible and poweful.
Directory Update (http://www.active-directory-update.com) is also a web-based application. It allows the administrator to configure drop-down lists and to configure which attributes the user can update or even view.