Every Domain user can query the AD server accounts and
computers by "dsquery user & dsquery computer".
So is there any method to stopping the users access this data.
but the special user can.
Thanks
stop nomal domain user query AD server USER & computer
Hi @wenbin
It's the default behaviour for AD to allow authenticated user to be able to query the AD. Blocking users from reading the attributes of objects in the AD could break existing functionality. Have a look at the answers to this question, which does cover how to restrict access to specific groups.
https://docs.microsoft.com/en-us/answers/questions/707421/ad-search-privileged-groups.html
Gary.
5 people are following this question.
