AD browsing




Our network was just upgraded from winNT4.0 domain to a
single win2000 AD domain running in native mode. We have
about 4,500 users and 2000 computers supported by 3 Domain
Controllers. DNS, WINS and DHCP are being used on the
network. The upgrade was successful and everything has
been running fine for several months. The organization
has been divided into 10 OU and control delegated to
specific technicians.

Question1 -
When browsing the network with a regular user account
under "My Network Place > Entire Network> Directory", the
full AD structure is listed by OU with users and computer
accounts. How do you prevent users from browsing the AD
structure (OUs, users, computers, domain controllers)? I
would rather have the users only be able to browse the
network using "My Network Place > Entire Network>
Microsoft Windows Network" or not at all?

Question2 -
When browsing the domain via "My Network Place > Entire
Network> Microsoft Windows Network", all computers are
listed under the domain. Is there a way to organize the
list based on OU? I'm looking for a way to browse for a
computer without having to look through 2000 computer
accounts at once.

Question3 -
Setting permissions on an object. User accounts for the
entire domain (4,500) are loaded into the window when
clicking the ADD button to select users for share or
permissions. Is there a way to only display user accounts
from certain top level OUs?

Thanks for any responses. I decided to group these
questions together since they followed the same general

Kevin Huntly

Quick, easy answer to the first two questions: Use Group
Policy. One of the little benefits over Windows NT.. learn
it, live it, love it. You can set Group Policy objects to
disable "Entire Network" and "Computers Near Me". I don't
see one for Directory, however.

In order to only show what you want to see when searching,
don't select the Domain itself, only select the OU you
want to look in, and it will only show what's inside that

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question