[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 468
  • Last Modified:

admin user that can only see their OU

Hi

I was wondering if anybody could help,

We currently have a Mutli-Tenanted excahnge and Sharepoint that is working very good, recently we have been offering virtual desktops,

The question I have is our ad is setup which each customer having it's Own OU, and we have restricted access by gpo to not allow the users to do active directory lookups

We have been requested for admin access to these desktops and I have created GPO's and secuirty measures to ensure they can not see each others computers or services but the last part is the AD

I appricate that the AD is a Directory by nature and was designed to be one thus it makes sense that you can lookup every user and group

I can block AD lookup's altoghter but this restricts the admins from working on their own OU's having to manually type exact usernames

Is there anyway to set it up so that they can only see the users/groups and resources in there OU only

any help would be much appricated
0
CloudNut
Asked:
CloudNut
1 Solution
 
CloudNutAuthor Commented:
Forgot to mention it is on windows 2008 r2
0
 
David Johnson, CD, MVPOwnerCommented:
Create a restricted user that has admin options in their respective OU
http://technet.microsoft.com/en-us/library/cc778807(v=ws.10).aspx
0
 
Jian An LimSolutions ArchitectCommented:
what you are looking for is multi-tenant active directory.

http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/66d0f0ad-5e76-407d-b383-f8bce07930b3/

there is too many unstructured information so you need to find out what exactly can be achieve.
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now