Excellent, thanks for the info!

Don Guyer
Systems Engineer - Information Services
Prudential, Fox & Roach/Trident Group
431 W. Lancaster Avenue
Devon, PA 19333
Direct: (610) 993-3299
Fax: (610) 650-5306
[email protected]


-----Original Message-----
From: Quick, Charlie [mailto:[email protected]] 
Sent: Thursday, February 04, 2010 1:09 PM
To: Active Directory Admin Issues
Subject: RE: Authenticated Users in OU's

Yes, this is what I did. I removed list contents, list objects, and read all 
from authenticated user, but left read permissions. Then I created a group 
called Example-Admin, and gave them all the above. Once this was done, I added 
the users to this group and delegated control of what they needed, etc.. add 
user, delete user. I did this for each OU and tested it. No one could see the 
OU except if you were in the Admin group I created. This prevents users or 
admins to see other OUs.

This was basically what I was trying to achieve.

-Charlie

-----Original Message-----
From: Don Guyer [mailto:[email protected]] 
Sent: Thursday, February 04, 2010 6:28 AM
To: Active Directory Admin Issues
Subject: RE: Authenticated Users in OU's

"Basically, I want to restrict users from listing information from any object 
in different OU's.”

Maybe if you could expand on what you are trying to accomplish/prevent, there 
may be a different route to take.

Don Guyer
Systems Engineer - Information Services
Prudential, Fox & Roach/Trident Group
431 W. Lancaster Avenue
Devon, PA 19333
Direct: (610) 993-3299
Fax: (610) 650-5306
[email protected]

-----Original Message-----
From: Quick, Charlie [mailto:[email protected]] 
Sent: Wednesday, February 03, 2010 6:29 PM
To: Active Directory Admin Issues
Subject: Authenticated Users in OU's

If i removed the read access from the OU object for "authenticated users", will 
this cause any issues? Basically, I want to restrict users from listing 
information from any object in different OU's. 
~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~

~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~

~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~

~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~

Reply via email to