URGENT HELP PLEASE! Problems with AD Permissions

[AJ]

Hi Folks

We have an AD group called US Helpdesk and within that group (so it is
a member of) we have a group called ALL Helpdesks. How can I stop
members of the US Helpdesk seeing the membership of the ALL Helpdesks
group.
At the moment becuase the group is mail enabled in Exchange,
membership can be viewed from the Outlook client. If the user looks at
the US Helpdesks properties they can then select the member of tab
and see its a member of the All Helpdesks group. They can then drill
further into the All Helpdesks group and see members of this group as
well!

How can I stop this behaviour from happening.

Many thanks for your help

AJ

 

[Florian Frommherz [MVP]]

Howdie!

We have an AD group called US Helpdesk and within that group (so it is
a member of) we have a group called ALL Helpdesks. How can I stop
members of the US Helpdesk seeing the membership of the ALL Helpdesks
group.
At the moment becuase the group is mail enabled in Exchange,
membership can be viewed from the Outlook client. If the user looks at
the US Helpdesks properties they can then select the member of tab
and see its a member of the All Helpdesks group. They can then drill
further into the All Helpdesks group and see members of this group as
well!

If it is a distribution group, you should be able to hide the group
membership from Active Directory Users and Computers -- it should be one
of the Exchange Advanced Settings.

Let me know if you can't find it, I'll look into it then.

Cheers,
Florian

 

[AJ]

Howdie!


If it is a distribution group, you should be able to hide the group
membership from Active Directory Users and Computers -- it should be one
of the Exchange Advanced Settings.

Let me know if you can't find it, I'll look into it then.

Cheers,
Florian

Thanks Florian

Its a little more difficult with Exchange 2007, had to deny a specific
permission on the group using the shell, which denied the ability to
view the group membership.

AJ