> I have information that I want in the global catalog about employees. I
> only want the info (home add and phone) viewed by authorized people. How
> can restrict who has access to search the Active Directory and limit what
> they can view?
You need to look at the Access Control structure available on objects and
properties. Use ADSIEdit (from the Windows 2000 Support Tools) to view and
set this information (although scripting may be more efficient in the long
run, ADSIEdit is where to start.)
--
Adam
List info: http://www.activedir.org/mail_list.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
