level for new OUs
created here)
/Guido
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto,
Jorge de
Sent: Samstag, 23. Juli 2005 01:15
To: ActiveDir@mail.activedir.org; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Hiding an OU
Guido
to access the file.
Thank you
Cheers
#JORGE#
From: [EMAIL PROTECTED] on behalf of Grillenmeier, Guido
Sent: Sun 7/24/2005 8:45 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Hiding an OU
nope, not if you did your job right at the OU level and you
each time you create an OU beneath that OUx remove from the OUs authenticated
users. The objects in the OU also have authenticated users and everyone
explicitely defined. you also need to get rid of those too. Remove the members
of the Pre-Windows 2000 compatible Access group (if possible and
:[EMAIL PROTECTED] On Behalf Of Almeida Pinto,
Jorge de
Sent: Freitag, 22. Juli 2005 15:52
To: ActiveDir@mail.activedir.org; activedir@mail.activedir.org
Subject: RE: [ActiveDir] Hiding an OU
each time you create an OU beneath that OUx remove from the OUs
authenticated users. The objects in the OU also
@mail.activedir.org
Subject: RE: [ActiveDir] Hiding an OU
if you're fine with other users seeing the existance of OUX, then
there's no need to leverage DSHEURISTICS and the list object mode.
but I'd suggest to change the def. sec. descriptor for OUs by removing
Auth. Users from it - this way
