Hiding Users and Groups from active directory search 1

[framfram]

Hi all,

I would like to hide users and groups and their properties from the AD. I set a GPO hiding the active directory folder but that's not enough because using the AD search, we still see users and groups and properties. And the maximum size of Active Directory searches doesn't satisfy what I want to do. Is there any other procedures to hide completely users and groups from active directory search ?

Thanks for your helps ...

 

[djtech2k]

You can just set the DACL on those objects to remove the list and read access for the users/groups that you do not want to see it.

 

[framfram]

I tested DACL : take off the authenticated users from the list but when I log in with an user account on the network, I can still see the users/groups in the active directory search ... Any idea why djtech2k ? Thanks ...

 

[djtech2k]

You need to make sure that it is not inheriting the allowed access from above as well as you need to take off "list" access.