Re: Domain users Account- How can i hide it in ( Active Directory

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Medo_in_Egypt (MedoinEgypt_at_discussions.microsoft.com)
Date: 02/24/05 

Date: Wed, 23 Feb 2005 23:39:02 -0800

dear Tony,

thanks for your reply.

i want to understand something.
you said deny read access to the users objects.
ok which users you are talking about, the Normal domain users account .

for example if i have the following users :-

M1
M2
M3

AND I HAVE THE ONLY 2 ADMINISTRATOR AS THE FOLLOWING:

A1
A2

AND I WANT A1 WHEN HE LOG IN TO THE D.C TO SEE ONLY ( M1,M2) ONLY.
WHILE IF A2 LOGIN, HE WILL SEE ( M3).
BUT IF THE A3 LOGIN HE WILL SEE THE 3 USERS .

FOR WHOME SHOULD I DENY ACCESS READ ?

CAN YOU INFORM ME

"Tony Eversole" wrote:

> Deny read access to the users objects to those accounts.
>
> --
> Tony Eversole MCSE, MCSA, Net+, A+
> "Medo_in_Egypt" <MedoinEgypt@discussions.microsoft.com> wrote in message news:AC62A527-DB3A-42BA-B1EB-7C7989AFC16B@microsoft.com...
> dear All,
>
> i have here one D.C, with 5 msater rolls. as you know when you create user
> in the domain, you are create it through Active directory users & Computers.
> and after that you can see the users under the container (users).
>
> my question is , i have here 1 d.c , and 5 Admins.
>
> i have here also 3users in the domain, and i want to hide them from the 5
> Admins except me . so in case of any one open D.C and log in with the default
> Administrator user name & Password, he can see the all users except the
> 3users.
>
> while if i log only with my user name & password to this D.C, i can see the
> 3 users + other users & i can change the settings for all of the users.
>
> so my questions is :-
>
> how can i hide users after i create them in Domain , from being seen
> through Active directory users & computers , for the specific Admins, and let
> it for me available only for this users.
>
> is there any way, to hide some users in Active directoiry users & computers
> from the List under the container ( Users) ,
>
> is there anyway to help me to do that ?
>

Relevant Pages

  • Re: Authentification on Win2k8 r2 inter site
    ... As long as the setting is set to allow (Not deny) yes you have it configured ... Did you review which users are currently being cached? ... Then in the active directory Users and computers on a rwdc, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Save me from my stupidity
    ... "stefanT" wrote in message ... added 'AuthenticatedUsers' and set the permissions to: ... > AuthenticatedUsers: deny full ... I could still not login locally. ...
    (microsoft.public.security)
  • Re: Joining Computers to Domain
    ... >>immediately indicate if you have a DENY somewhere. ... >>> is some permission that is blocking it. ... >>> Our problem is with student admins. ... >>> add computers to the domain. ...
    (microsoft.public.windows.group_policy)
  • Re: Save me from my stupidity
    ... "stefanT" wrote in message ... > users" but this failed and then I remembered that Deny overides Allow. ... >> the user is in has in the deny logon locally user ... I could still not login locally. ...
    (microsoft.public.security)
  • Re: Limit the number of erroneous logins of root from the same IP
    ... After the limit that IP can not try to login anymore. ... Why are you allowing root to log in over the net? ... before any of the deny lists in /etc/hosts.allow. ... It offered three options - add a host reject route (man ...
    (alt.os.linux.redhat)