Prohibiting authenticated users to list/read AD contents

[nwtest]

How I can prevent users to list all AD Users and
computer contents?

By defaut domain users or authenticated users can open MMC
Active Director USers and Computers and list my entire AD
users and Computers.

cheers.
Orlando

 

[Chriss3]

Restrict users to the explicitly permitted list of snap-ins
User Configuration\Administrative Templates\Windows Components\Microsoft
Management Console



http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/251.asp?frame=true

 

[Chriss3]

Sorry I forgot this one, if you only want to prevent dsa.msc (Active
Directory Users and Computers Snapin).

Active Directory Users and Computers
User Configuration\Administrative Templates\Windows Components\Microsoft
Management Console\Restricted/Permitted snap-ins

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/252.asp?frame=true

 

[Ace Fekay [MVP]]

In

How I can prevent users to list all AD Users and
computer contents?

By defaut domain users or authenticated users can open MMC
Active Director USers and Computers and list my entire AD
users and Computers.

cheers.
Orlando

Just to add to Chris' response, here's another link:

314978 - HOW TO Use Adminpak.msi to Install a Specific Server Administration
Tool in Windows 2000 [Specific Snap-in for an MMC]:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q314978


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory