|
Posted by Roger Abell [MVP] on January 12, 2006, 4:03 am
Please log in for more thread options
Accounts need to be able to query AD with ldap in order to function.
However, all accounts do not have access to everything. You did
notice that all AD objects have ACLs, right ?
> Hi,
>
> Firstly, thanks for taking time to answer my question. I am new to
> Active Directory and would like to know if it is possible to restrict
> or prevent normal AD user account from performing LDAP searches against
> the AD? It seems like in Windows 2000 AD will allow LDAP searches
> initiated by any valid AD user accounts against the AD (anonymous LDAP
> search already disabled).
>
> We have users using LDAP clients, using their AD account IDs and
> passwords to perform LDAP searches. I wonder if this behaviour can be
> disabled for all AD user accounts or specific AD user accounts. Thank
> you.
>
> Regards,
> Damon
>
| 
XML Sitemap