Hide Active Directory User Object Fields

[Guest]

Is it possible to hide an AD User object field? example, the Web Page or
Office field.
I will appriciate any help on this matter....Thank You

 

[Matjaz Ladava [MVP]]

How do you mean hide ? In UI you change permission so no one can modify it ?
Generally you can't change ADUC UI without doing some coding or creating
your own utility for user management. You could use ACL'S on attributes to
prevent users to modify this value.

--
Regards

Matjaz Ladava, ladava.com
MCSA, MCSE, MCT
Microsoft MVP Windows Server - Directory Services
e-mail: (e-mail address removed), (e-mail address removed)

 

[Guest]

Thank you Matjas for replying.
When I say hide, I mean making that field none visible (Hidden Field) from
Users and Computers and from an AD people search in XP, for eaxmple the
canonical name field.

 

[ptwilliams]

You can take away the permission that allows users to read this attribute
(each attribute has a read and write permission).

To do this, view advanced features in dsa.msc, right-click an OU, click the
security tab, advanced, choose the user or group, click edit, properties and
you can remove the permission to read individual properties.

However, you can not remove it from the GUI without some serious
programming...

--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/

Thank you Matjas for replying.
When I say hide, I mean making that field none visible (Hidden Field) from
Users and Computers and from an AD people search in XP, for eaxmple the
canonical name field.