Re: Hiding Users in AD

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Steve-

I think you're doing the right thing. Removing rights is the only way I
know if to do this. You might try removing the rights on the OU, rather
than the individual accounts. This should work.


"-Steve-" <newsgroups@xxxxxxxxxxxxxxx> wrote in message
news:%236E%23p%23sTGHA.1236@xxxxxxxxxxxxxxxxxxxxxxx
I work for a college and one of my requirments is to keep anyone except
those with administrative rights in AD from being able to view student
accounts. The most obvious way to search for a user is with the windows
address book of course.

All the students live in the same OU. If I simply go to an account,
remove the Authenticated Users from the ACL's, then I get the desired
results.

Here's my questions:

1. Is there a better way to do this than a nightly script that goes
through all the accounts in the students OU and remove the Authenticated
Users from the ACL's? (remeber I don't want this behaviour to happen to
Faculty/Staff)

2. Are there other side affects that I'm not aware of?

Steve



.

Relevant Pages