Improve company productivity with a Business Account.Sign Up

x
?
Solved

admin user that can only see their OU

Posted on 2013-05-16
3
Medium Priority
?
470 Views
Last Modified: 2013-05-29
Hi

I was wondering if anybody could help,

We currently have a Mutli-Tenanted excahnge and Sharepoint that is working very good, recently we have been offering virtual desktops,

The question I have is our ad is setup which each customer having it's Own OU, and we have restricted access by gpo to not allow the users to do active directory lookups

We have been requested for admin access to these desktops and I have created GPO's and secuirty measures to ensure they can not see each others computers or services but the last part is the AD

I appricate that the AD is a Directory by nature and was designed to be one thus it makes sense that you can lookup every user and group

I can block AD lookup's altoghter but this restricts the admins from working on their own OU's having to manually type exact usernames

Is there anyway to set it up so that they can only see the users/groups and resources in there OU only

any help would be much appricated
0
Comment
Question by:CloudNut
3 Comments
 

Author Comment

by:CloudNut
ID: 39172885
Forgot to mention it is on windows 2008 r2
0
 
LVL 85

Accepted Solution

by:
David Johnson, CD, MVP earned 1000 total points
ID: 39173785
Create a restricted user that has admin options in their respective OU
http://technet.microsoft.com/en-us/library/cc778807(v=ws.10).aspx
0
 
LVL 38

Expert Comment

by:Jian An Lim
ID: 39173792
what you are looking for is multi-tenant active directory.

http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/66d0f0ad-5e76-407d-b383-f8bce07930b3/

there is too many unstructured information so you need to find out what exactly can be achieve.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

The article explains the process to deploy a Self-Service password reset portal I developed a few years ago. Hopefully, it will prove useful to someone.  Any comments, bug reports etc. are welcome...
Seizing the Operation Master Roles in Windows Server 2016 in case of FSMO holder failure.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

585 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question