Query Ldap - Please Help, its urgent

  • Thread starter Thread starter Nejmos Saqeb
  • Start date Start date
N

Nejmos Saqeb

Greetings,

I want to create a specific user who can only query ldap and nothing else in
a domain.
Please help.

Thanking you

Nejmos Saqeb
(e-mail address removed)
 
"Nothing else" is hardly achieveable. You can leave the user member of
Domain Users group, or even create a special empty group, set it as a user's
primary group an remove them from Domain Users. But the user still will be
able to access everything that is accessible for Authenticated Users - so
you should see if that is appropriate for you.
You can also set permissions on AD to restrict visibility/accessibility of
specific subtrees (by default Authenticated Users can read anything).

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


Greetings,

I want to create a specific user who can only query ldap and nothing else
in
a domain.
Please help.

Thanking you

Nejmos Saqeb
(e-mail address removed)
 
Back
Top