Re: Disable search for Active Directory

If you really want to disable then you can use two options. You can use
either Group Policy settings or Registry. Here is the Group Policy settings
for Active Directory Search__

Maximum size of Active Directory searches
Specifies the maximum number of objects that the system displays in response
to a command to browse or search Active Directory. This policy affects all
browse displays that are associated with Active Directory, such as those
displays in Local Users and Groups, Active Directory Users and Computers, and
dialog boxes that are used to set permissions for user or group objects in
Active Directory.
If you enable this policy, you can use it to limit the number of objects
that are returned from an Active Directory search. If you disable this policy
or if you do not configure it, the system displays up to 10,000 objects.

Enable filter in Find dialog box
Displays the filter bar above the results of an Active Directory search. The
filter bar consists of buttons for applying additional filters to search
results. If you enable this policy, the filter bar appears when the Active
Directory Find dialog box opens, but users can hide it.

Hide Active Directory folder
Hides the Active Directory folder in My Network Places.
The Active Directory folder displays Active Directory objects in a browse
window.
If you enable this policy, the Active Directory folder does not appear in
the My Network Places folder. If you disable this policy or if you do not
configure it, the Active Directory folder appears in the My Network Places
folder.

Registry___http://www.winguides.com/registry/display.php/845/

SystmProg

"Chris Leiter" wrote:

> Why would you want to limit this?
> If you have certain groups that you don't want to have exposed, you can
> change the ACL of those groups to restrict who has the "read membership"
> property permission, but removing the search feature entirely defeats one of
> the purposes of AD, which is to act as a respository for information, for
> both users and administrators.
>
> Without it, users could not search for pulished printers or shared folders.
>
> Chris
>
> "Slimard" <slimobeny@xxxxxxxxxxx> wrote in message
> news:ejbRuJ2jFHA.3148@xxxxxxxxxxxxxxxxxxxxxxx
> > Hello,
> >
> > I would like to know if it is possible to disable the "Search for Active
> > Directory" from XP. With this feature you can see users, groups and
> > computers. My concern is that I don't want the users to see membership of
> > groups.
> >
> > thanks for your help
> >
> >
> >
>
>
>
.

Loading