I want to DENY users in a child domain to read the properties of users in a root domain (ex. Phone number, address, etc). I have tried applying the a DENY on a group added to the Root Domain but it does not work on the OU or sub Ous. I having to apply the same the DENY to each OU to keep the child domain from viewing it. There has to be a better way. Does anyone know what I might be doing wrong?
Thanks, Joe S. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
