Hiding AD users from CallManager directory lookups

See official Cisco recommendations and text file editing techniques here: CallManager DC Directory and Active Directory - Hide Users

Basically you need to change the AD user descriptions to CiscoPrivateUser