Securing OU's

[Jeff Miller]

We are setting up AD in our hosting environment and host
for many of our business units. We would like to put
each business unit in their own OU and would like to
restrict what they can see in network neighborhood. We
would like to have each OU see only the computers in
their OU when they browse network neighborhood. Is there
any way to accomplish this? Thanks in advance.

 

[Tomasz Onyszko]

We are setting up AD in our hosting environment and host
for many of our business units. We would like to put
each business unit in their own OU and would like to
restrict what they can see in network neighborhood. We
would like to have each OU see only the computers in
their OU when they browse network neighborhood. Is there
any way to accomplish this? Thanks in advance.

Take a look at this document:
http://www.microsoft.com/serviceproviders/whitepapers/hvh_ad_deploy.asp

 

[jeff miller]

Tom,
I read the document and it looks great, however the links in the doc that
point to vbs files on microsoft's website no longer exist. I was also
unable to search google for those files either. Can you help me find:
dsheuristics.vbs and securead.vbs?
Also this document tells you how to prevent active directory browsing, does
that include network neighborhood browsing? We dont want computers/users of
one OU to view computers in another OU even when they browse network
neighborhood.