MarkBourn
asked on
Disable Search Active Directory button in Windows 7 Network options.
I am trying to prevent users from right clicking the network icon in the system tray and then clicking the open network and sharing center. Once in here they can click the domain name button that takes them to a page that supplies a button to search active directory.
This "Search Active Directory" button not only allows them to search but to actually browse the AD structure which I am not happy with.
I have looked at various articles that suggest enabling the policy on AD to set AD searches to 0. This does not stop them from browsing AD using the browse button to see all the OU`s.
Another suggestion is to remove the network icon completely which I am happy with however this stops users with wireless cards from browsing available wireless networks.
I cannot find any registry key that stops the usage of this button or prevents the user from browsing AD
Another option would be to stop users at an AD level from browsing out of their own OU. From what I have read most people are nervous about this and seem to think there are repercussions to this.
This "Search Active Directory" button not only allows them to search but to actually browse the AD structure which I am not happy with.
I have looked at various articles that suggest enabling the policy on AD to set AD searches to 0. This does not stop them from browsing AD using the browse button to see all the OU`s.
Another suggestion is to remove the network icon completely which I am happy with however this stops users with wireless cards from browsing available wireless networks.
I cannot find any registry key that stops the usage of this button or prevents the user from browsing AD
Another option would be to stop users at an AD level from browsing out of their own OU. From what I have read most people are nervous about this and seem to think there are repercussions to this.
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
I wonder why you are unhappy with users being able to search AD/ see the structure. It's no security breach, that's why it's possible by default.
If they should not see how it's organized, well then forget my comment :)