Try this... Open ADUC and on the left hand pane right-click on the OU that you want these admins to see... choose new window from here... Go to the windows menu and choose the original window... Close that window... save the .msc file out and apply NTFS permissions on the .mcs file.
Alternatively you can remove the read permission from the authenticated users group and apply read permission to the objects that you want these admins to see. You will need to allow them to read the root but after that point they will only display those object that they have read access to. I personally like the first choice and have added tackpads to add links to frequently used actions i.e. reset passwords etc. <plug> A lot of the tedium is taken out of AD administration with third party tools such as 'Enterprise Directory Manager' from Aelita Software. </plug> Kevin -----Original Message----- From: Daniel J. Cook [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 18, 2002 2:52 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Customizing the MMC... Dear Windows 2000 Free List, Hello! I have a situation with customizing an MMC and I am wondering if anyone can help. I would like to setup a custom MMC that will allow only a certain group of users the ability to see and change one OU in our Active Directory Users and Computers. Currently, we have about 10 OUs and I have been trying to make a custom MMC to my specifications. I can make a custom MMC that will allow people to change and alter AD Users and Computers (which includes all of the OUs) but I would like to make it more specific so that they can only alter or change one OU. For example, I would like to create an MMC that would only contain the "Bonga" OU and nothing else. I have experimented with customizing MMCs but cannot seem to find a method to create one that specific. Does anyone have any advice or suggestions on creating a custom MMC that is OU specific? Thanks in advance. Take care. All the best, Daniel J. Cook List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
