Re: how to restrict users to search in their own Organizational Unit


Jorge Silva schreef:

Hi
By default evryone has read-access to AD.
To deny that right you must create a security group and deny read
permission, then add the users to that security group.

--
*************************************************
I hope that the information above helps you
Good Luck

Jorge Silva

MCSA + Exchange + MSCE
*************************************************


Thanks that helps already!

But, we have +/- 40 OU's with approximately 12000 users, how can I
handle this problem best?
If I need to create a security group per OU and then add all users
seperately then I will have alot of work...

.

Relevant Pages

  • Re: how to restrict users to search in their own Organizational Unit
    ... To deny that right you must create a security group and deny read permission, then add the users to that security group. ... Active Directory, then he can see all users in Active Directory. ...
    (microsoft.public.windows.server.active_directory)
  • Re: can we remove a user from "EVERYONE" group
    ... > -Add an explicit deny to that security group on the folders they ... then stated that he couldn't logon locally as admin anymore. ... member of the domain users group. ...
    (microsoft.public.win2000.general)
  • Re: New ISA 2004 Rule Not Working
    ... properties for both the deny and allow rules. ... It ignores the deny for the user and hits on the SBS protected network ... Limited Access Users is a User set made up of the AD security group I ...
    (microsoft.public.windows.server.sbs)
  • Re: Prevent Users from accessing the Global Address List
    ... "Paul Landregan" wrote: ... >accessing the Global address list in Outlook and provide them with their own ... >Create a security group containing the users in question. ... >the security tab I added the group of users I wish to deny. ...
    (microsoft.public.exchange.setup)
  • Re: Prevent Users from accessing the Global Address List
    ... >>accessing the Global address list in Outlook and provide them with their ... >>Create a security group containing the users in question. ... >>the security tab I added the group of users I wish to deny. ... > Mark Arnold MCSA MCSE+M MVP, ...
    (microsoft.public.exchange.setup)