Prevent network users from searching the global catalog

  • Thread starter Thread starter rebloomfield
  • Start date Start date
R

rebloomfield

How do we prevent users on the network from searching and displaying
the
entire contents of the global catalog in Active Directory on MS Server
2003?
 
Unfortunately, you can't since you have to query the directory for lot of
things, right? You can how ever limit the allowed search scope, turn AD into
list object mode, and using group policies for limit the search options at
your windows desktops. What is the reason for doing this?

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
 
I work in a large school, and I don't want the students going to the
find printers dialog and looking at the dump of usernames etc.

We stopped them searching the domain, but we can't stop them searching
via Entire Directory.
 
Hi,

Based on my research, I would like to provide you with the following GPOs
for your reference:

1. Computer configuration->Administrative Templates->Printers-> Allow
printers to be published

2. Computer configuration->Administrative
Templates->Printers->Automatically publish new printers in Active Directory

3. Computer configuration->Administrative Templates->Printers->Printer
browsing

4. User configuration->Administrative Templates->Control
Panel->Printers->Browse the network to find printers

The detailed information, please refer to the description for each GPOs.

I hope the information helps.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top