I need to create a group and place all the users in it but none of the users properties should show this group.

Posted on 2007-10-10
Last Modified: 2010-04-20

I need to create a group and place all the users in it but none of the users properties should show this group.
I need it to be a invisible to users.
I want to use this as a group when a mail send should reach all and would be send only by selected.So only selected persons can send a mail to these groups.

When we go to the users properties in GAL the group should not be seen.

Question by:bsharath
    LVL 2

    Accepted Solution

    you could hide the group from the only someone who knows the address could send to it....

    i dont think you can hide it so that it doesnt show up in the users properties in question is why would you want to ?....the user cant see their properties.....
    LVL 6

    Assisted Solution

    In order to hide them from the GAL go to exchange advanced on their user account properties in Active Directory Users and Computers and select hide for exchange address lists.

    Just as said above you will have to know the full address of the dist group to send it. And also as it says above I do not think there is a way to remove the group from being viewed in the user properties of their user acoount but the users cannot access this.
    LVL 58

    Expert Comment


    Just to point out that all users have read access over Active Directory, so if a user happens to have access to Active Directory Users and Computers (perhaps installed through the resource kit) then they could in theory access AD this way and read their user properties, looking at the groups they're a member of.

    Sharath: *Don't* remove their read access to AD though as it is important and they can't actually modify or create anything. Just make sure they haven't got access to the Active Directory management tool, either on local machines or through Terminal Services.

    LVL 6

    Expert Comment

    Yes that is true, but most people I deal with on a daily basis would not know how to do that. If it became a problem then one would have to find a way to block access to AD Users and Computers. I would not worry about the problem personally inless that became a problem. But thanks for the clarification, I should have specified that.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now