Making attributes private in Active Directory

  • Thread starter Thread starter Eric D
  • Start date Start date
E

Eric D

Is there any way to make attributes in Active Directory "private"?
E.g. I want to make an attribute that can only be viewed by Domain
Administrators and not regular users. It seems any attribute in Active
Directory can be viewed by anyone on the Domain with a password, does
this mean all information in Active Directory should be considered
public information?
 
You can modify the security on each attribute so that it cannot be viewed.
Highlight the object, right click, select properties, select the security
tab, click advanced, add the group or user that you want to prevent from
seeing the attributes or edit existing permissions, click the properties
tab, uncheck allow or check deny on the attribute that you do not want the
user to view.


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top