Prevent network users from searching the global catalog

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

How do we prevent users on the network from searching and displaying
the
entire contents of the global catalog in Active Directory on MS Server
2003?

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Unfortunately, you can't since you have to query the directory for lot of
things, right? You can how ever limit the allowed search scope, turn AD into
list object mode, and using group policies for limit the search options at
your windows desktops. What is the reason for doing this?

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips

<rebloomfield@msn.com> skrev i meddelandet
news:1109156242.470408.49760@o13g2000cwo.googlegroups.com...
> How do we prevent users on the network from searching and displaying
> the
> entire contents of the global catalog in Active Directory on MS Server
> 2003?
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

I work in a large school, and I don't want the students going to the
find printers dialog and looking at the dump of usernames etc.

We stopped them searching the domain, but we can't stop them searching
via Entire Directory.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Have a look at this article about List Object Mode.
http://www.chrisse.se/MAQB.asp?ID=34

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips

<rebloomfield@msn.com> skrev i meddelandet
news:1109334158.080499.11780@g14g2000cwa.googlegroups.com...
>I work in a large school, and I don't want the students going to the
> find printers dialog and looking at the dump of usernames etc.
>
> We stopped them searching the domain, but we can't stop them searching
> via Entire Directory.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi,

Based on my research, I would like to provide you with the following GPOs
for your reference:

1. Computer configuration->Administrative Templates->Printers-> Allow
printers to be published

2. Computer configuration->Administrative
Templates->Printers->Automatically publish new printers in Active Directory

3. Computer configuration->Administrative Templates->Printers->Printer
browsing

4. User configuration->Administrative Templates->Control
Panel->Printers->Browse the network to find printers

The detailed information, please refer to the description for each GPOs.

I hope the information helps.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.