I would like to stop domain users to access the MMC console and view all the user/computer objects in the Active directory. As a default any domain users can install adminpak in the computer then configure the MMC console and he would be able to access and view everything? I want to restrict this for the Domain users who have Local administrator right in their computers?
Is there a solution? Please help .... Thanks