asked on

I need to create a group and place all the users in it but none of the users properties should show this group.

Hi,

I need to create a group and place all the users in it but none of the users properties should show this group.
I need it to be a invisible to users.
I want to use this as a group when a mail send should reach all and would be send only by selected.So only selected persons can send a mail to these groups.

When we go to the users properties in GAL the group should not be seen.

Regards
Sharath

ASKER CERTIFIED SOLUTION

michaelhooper

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

chuck-williams

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

tigermatt

chuck-williams,

Just to point out that all users have read access over Active Directory, so if a user happens to have access to Active Directory Users and Computers (perhaps installed through the resource kit) then they could in theory access AD this way and read their user properties, looking at the groups they're a member of.

Sharath: *Don't* remove their read access to AD though as it is important and they can't actually modify or create anything. Just make sure they haven't got access to the Active Directory management tool, either on local machines or through Terminal Services.

-tigermatt

chuck-williams

Yes that is true, but most people I deal with on a daily basis would not know how to do that. If it became a problem then one would have to find a way to block access to AD Users and Computers. I would not worry about the problem personally inless that became a problem. But thanks for the clarification, I should have specified that.