Solved

Active Directory LDAP Query

Posted on 2014-10-16
3
108 Views
Last Modified: 2014-10-23
Hi

I am in the process of configuring LDAP as we have a third party application that needs to query AD users.  I have created an AD account for this function, the only group membership is Domain users and using LDAP Administrator I can now browse AD.

I would like to lock this down so the application can only see certain OU.  Is there a simple way to do this ?

Thanks
0
Comment
Question by:bains1000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 16

Accepted Solution

by:
Joshua Grantom earned 500 total points
ID: 40385374
remove them from Domain Users, create a new group (ex. AD Read Only) add that account to that group.

Now in ADUC, go to the OU that you want them to be able to read, right click, go to properties, security, and only give that group (AD Read Only) rights to read child objects of that OU.

Repeat this for each OU you want it to be able to read.
0
 

Author Closing Comment

by:bains1000
ID: 40399631
Thanks worked a treat
0
 
LVL 16

Expert Comment

by:Joshua Grantom
ID: 40399634
Glad to help!
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question