be careful doing that... if you have users in that container and you do not give both the client machine and the user certain read props then policy will break, among other things.
If your just trying to hide from AD mmc's then you can set the ShowAdvanceViewOnly attrib which will hide the object unless the admin has enabled 'Advanced View'. Rgds, Tim On 6/2/06, Daniel Gilbert <[EMAIL PROTECTED]> wrote:
We created OU's and removed all users except for Domain Admins (of course we left the SYSTEM access). The OU never shows up for non-Domain Admins. Domain Admins have full access to the OU and can add as many objects as they want. Dan
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
