How can I hide the security tab in AD Users and Computers from my Help Desk?
--
Steve

RE: Security Tab by ZiadKChafi

ZiadKChafi
Thu Mar 27 03:12:00 PDT 2008

You can uncheck the Advanced Features from the View menu on AD Users and
Computers, but this is a basic method anyone can check it back, if it doesn't
solve the problem, please let me know and give more details about the group
membership of your Help Desk so we can find out a better solution.
--
Ziad K. Chafi
CompTIA A+, CompTIA N+, MCP, MCDST, MCAS: S, MCSE: S, MCDBA, MCTS, MCT


"Steven" wrote:

> How can I hide the security tab in AD Users and Computers from my Help Desk?
> --
> Steve
>

Re: Security Tab by Paul

Paul
Thu Mar 27 06:01:51 PDT 2008

Even if you were to hide it, the HD staff could just make changes from the
command prompt.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Steven" <Steven@discussions.microsoft.com> wrote in message
news:0A714CE0-860F-4435-9C6B-16C667516468@microsoft.com...
> How can I hide the security tab in AD Users and Computers from my Help
> Desk?
> --
> Steve
>



Re: Security Tab by Jorge

Jorge
Thu Mar 27 06:48:05 PDT 2008

not sure if it will work, but instead of using ADUC, you may to try to see
if creating a custom TASKPAD will help you with that (by disabling Advanced
View features)
http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote in message
news:O9Ei6qAkIHA.5080@TK2MSFTNGP02.phx.gbl...
> Even if you were to hide it, the HD staff could just make changes from the
> command prompt.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Steven" <Steven@discussions.microsoft.com> wrote in message
> news:0A714CE0-860F-4435-9C6B-16C667516468@microsoft.com...
>> How can I hide the security tab in AD Users and Computers from my Help
>> Desk?
>> --
>> Steve
>>
>
>


RE: Security Tab by Steven

Steven
Thu Mar 27 14:30:01 PDT 2008

Need a fixed way to keep them out, Paul makes a good point about command line
possibilities. So maybe I should rephrase the question to ask if there is a
way to prevent the Help Desk from changing the permissions I have delegated.

Thanks for the email, by the way ever since I turned on Exchange Sender ID
my MVP notifications have stopped coming.
--
Steve



"Ziad K. Chafi" wrote:

> You can uncheck the Advanced Features from the View menu on AD Users and
> Computers, but this is a basic method anyone can check it back, if it doesn't
> solve the problem, please let me know and give more details about the group
> membership of your Help Desk so we can find out a better solution.
> --
> Ziad K. Chafi
> CompTIA A+, CompTIA N+, MCP, MCDST, MCAS: S, MCSE: S, MCDBA, MCTS, MCT
>
>
> "Steven" wrote:
>
> > How can I hide the security tab in AD Users and Computers from my Help Desk?
> > --
> > Steve
> >

Re: Security Tab by Steven

Steven
Thu Mar 27 14:31:02 PDT 2008

Nice possibilties but this would block Object views as well. I am open for
suggestions.
--
Steve



"Jorge de Almeida Pinto [MVP - DS]" wrote:

> not sure if it will work, but instead of using ADUC, you may to try to see
> if creating a custom TASKPAD will help you with that (by disabling Advanced
> View features)
> http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
>
> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> ------------------------------------------------------------------------------------------
> * How to ask a question --> http://support.microsoft.com/?id=555375
> ------------------------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no rights!
> * Always test before implementing!
> ------------------------------------------------------------------------------------------
> #################################################
> #################################################
> ------------------------------------------------------------------------------------------
> "Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote in message
> news:O9Ei6qAkIHA.5080@TK2MSFTNGP02.phx.gbl...
> > Even if you were to hide it, the HD staff could just make changes from the
> > command prompt.
> >
> > --
> > Paul Bergson
> > MVP - Directory Services
> > MCT, MCSE, MCSA, Security+, BS CSci
> > 2008, 2003, 2000 (Early Achiever), NT4
> >
> > http://www.pbbergs.com
> >
> > Please no e-mails, any questions should be posted in the NewsGroup
> > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> >
> > "Steven" <Steven@discussions.microsoft.com> wrote in message
> > news:0A714CE0-860F-4435-9C6B-16C667516468@microsoft.com...
> >> How can I hide the security tab in AD Users and Computers from my Help
> >> Desk?
> >> --
> >> Steve
> >>
> >
> >
>
>

Re: Security Tab by Jorge

Jorge
Thu Mar 27 14:33:58 PDT 2008

what do you mean with "Block Object Views""

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Steven" <Steven@discussions.microsoft.com> wrote in message
news:2E5BD7BF-56E4-4DDF-9032-AE0CF155E499@microsoft.com...
> Nice possibilties but this would block Object views as well. I am open for
> suggestions.
> --
> Steve
>
>
>
> "Jorge de Almeida Pinto [MVP - DS]" wrote:
>
>> not sure if it will work, but instead of using ADUC, you may to try to
>> see
>> if creating a custom TASKPAD will help you with that (by disabling
>> Advanced
>> View features)
>> http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx
>>
>> --
>>
>> Cheers,
>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>>
>> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
>>
>> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
>> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
>> ------------------------------------------------------------------------------------------
>> * How to ask a question --> http://support.microsoft.com/?id=555375
>> ------------------------------------------------------------------------------------------
>> * This posting is provided "AS IS" with no warranties and confers no
>> rights!
>> * Always test before implementing!
>> ------------------------------------------------------------------------------------------
>> #################################################
>> #################################################
>> ------------------------------------------------------------------------------------------
>> "Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote in message
>> news:O9Ei6qAkIHA.5080@TK2MSFTNGP02.phx.gbl...
>> > Even if you were to hide it, the HD staff could just make changes from
>> > the
>> > command prompt.
>> >
>> > --
>> > Paul Bergson
>> > MVP - Directory Services
>> > MCT, MCSE, MCSA, Security+, BS CSci
>> > 2008, 2003, 2000 (Early Achiever), NT4
>> >
>> > http://www.pbbergs.com
>> >
>> > Please no e-mails, any questions should be posted in the NewsGroup
>> > This posting is provided "AS IS" with no warranties, and confers no
>> > rights.
>> >
>> > "Steven" <Steven@discussions.microsoft.com> wrote in message
>> > news:0A714CE0-860F-4435-9C6B-16C667516468@microsoft.com...
>> >> How can I hide the security tab in AD Users and Computers from my Help
>> >> Desk?
>> >> --
>> >> Steve
>> >>
>> >
>> >
>>
>>


Re: Security Tab by Steven

Steven
Thu Mar 27 15:20:00 PDT 2008

The "Object" tab on the DSA.MSC when Advanced Features is viewed. I really
like the idea of using TaskPad but what would prevent users from using the
regular DSA.MSC from the adminpak?


Steve



"Jorge de Almeida Pinto [MVP - DS]" wrote:

> what do you mean with "Block Object Views""
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services #
>
> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> ------------------------------------------------------------------------------------------
> * How to ask a question --> http://support.microsoft.com/?id=555375
> ------------------------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no rights!
> * Always test ANY suggestion in a test environment before implementing!
> ------------------------------------------------------------------------------------------
> #################################################
> #################################################
> ------------------------------------------------------------------------------------------
> "Steven" <Steven@discussions.microsoft.com> wrote in message
> news:2E5BD7BF-56E4-4DDF-9032-AE0CF155E499@microsoft.com...
> > Nice possibilties but this would block Object views as well. I am open for
> > suggestions.
> > --
> > Steve
> >
> >
> >
> > "Jorge de Almeida Pinto [MVP - DS]" wrote:
> >
> >> not sure if it will work, but instead of using ADUC, you may to try to
> >> see
> >> if creating a custom TASKPAD will help you with that (by disabling
> >> Advanced
> >> View features)
> >> http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx
> >>
> >> --
> >>
> >> Cheers,
> >> (HOPEFULLY THIS INFORMATION HELPS YOU!)
> >>
> >> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
> >>
> >> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> >> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> >> ------------------------------------------------------------------------------------------
> >> * How to ask a question --> http://support.microsoft.com/?id=555375
> >> ------------------------------------------------------------------------------------------
> >> * This posting is provided "AS IS" with no warranties and confers no
> >> rights!
> >> * Always test before implementing!
> >> ------------------------------------------------------------------------------------------
> >> #################################################
> >> #################################################
> >> ------------------------------------------------------------------------------------------
> >> "Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote in message
> >> news:O9Ei6qAkIHA.5080@TK2MSFTNGP02.phx.gbl...
> >> > Even if you were to hide it, the HD staff could just make changes from
> >> > the
> >> > command prompt.
> >> >
> >> > --
> >> > Paul Bergson
> >> > MVP - Directory Services
> >> > MCT, MCSE, MCSA, Security+, BS CSci
> >> > 2008, 2003, 2000 (Early Achiever), NT4
> >> >
> >> > http://www.pbbergs.com
> >> >
> >> > Please no e-mails, any questions should be posted in the NewsGroup
> >> > This posting is provided "AS IS" with no warranties, and confers no
> >> > rights.
> >> >
> >> > "Steven" <Steven@discussions.microsoft.com> wrote in message
> >> > news:0A714CE0-860F-4435-9C6B-16C667516468@microsoft.com...
> >> >> How can I hide the security tab in AD Users and Computers from my Help
> >> >> Desk?
> >> >> --
> >> >> Steve
> >> >>
> >> >
> >> >
> >>
> >>
>
>

Re: Security Tab by Steven

Steven
Thu Mar 27 15:45:01 PDT 2008

ya know what, forget that. how do I prevent them from seeing Advanced Features?
--
Steve



"Jorge de Almeida Pinto [MVP - DS]" wrote:

> what do you mean with "Block Object Views""
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services #
>
> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> ------------------------------------------------------------------------------------------
> * How to ask a question --> http://support.microsoft.com/?id=555375
> ------------------------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no rights!
> * Always test ANY suggestion in a test environment before implementing!
> ------------------------------------------------------------------------------------------
> #################################################
> #################################################
> ------------------------------------------------------------------------------------------
> "Steven" <Steven@discussions.microsoft.com> wrote in message
> news:2E5BD7BF-56E4-4DDF-9032-AE0CF155E499@microsoft.com...
> > Nice possibilties but this would block Object views as well. I am open for
> > suggestions.
> > --
> > Steve
> >
> >
> >
> > "Jorge de Almeida Pinto [MVP - DS]" wrote:
> >
> >> not sure if it will work, but instead of using ADUC, you may to try to
> >> see
> >> if creating a custom TASKPAD will help you with that (by disabling
> >> Advanced
> >> View features)
> >> http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx
> >>
> >> --
> >>
> >> Cheers,
> >> (HOPEFULLY THIS INFORMATION HELPS YOU!)
> >>
> >> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
> >>
> >> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> >> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> >> ------------------------------------------------------------------------------------------
> >> * How to ask a question --> http://support.microsoft.com/?id=555375
> >> ------------------------------------------------------------------------------------------
> >> * This posting is provided "AS IS" with no warranties and confers no
> >> rights!
> >> * Always test before implementing!
> >> ------------------------------------------------------------------------------------------
> >> #################################################
> >> #################################################
> >> ------------------------------------------------------------------------------------------
> >> "Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote in message
> >> news:O9Ei6qAkIHA.5080@TK2MSFTNGP02.phx.gbl...
> >> > Even if you were to hide it, the HD staff could just make changes from
> >> > the
> >> > command prompt.
> >> >
> >> > --
> >> > Paul Bergson
> >> > MVP - Directory Services
> >> > MCT, MCSE, MCSA, Security+, BS CSci
> >> > 2008, 2003, 2000 (Early Achiever), NT4
> >> >
> >> > http://www.pbbergs.com
> >> >
> >> > Please no e-mails, any questions should be posted in the NewsGroup
> >> > This posting is provided "AS IS" with no warranties, and confers no
> >> > rights.
> >> >
> >> > "Steven" <Steven@discussions.microsoft.com> wrote in message
> >> > news:0A714CE0-860F-4435-9C6B-16C667516468@microsoft.com...
> >> >> How can I hide the security tab in AD Users and Computers from my Help
> >> >> Desk?
> >> >> --
> >> >> Steve
> >> >>
> >> >
> >> >
> >>
> >>
>
>

Re: Security Tab by Jorge

Jorge
Thu Mar 27 15:53:20 PDT 2008

good one... if I'm not mistaken the ADUC MMC is required to be installed on
the computer where the taskpad is used. dont know an answer that as I do not
remeber anymore. it has been too long ago for me. Sorry

remember that a good delegation model is the key to secure the environment.
even the security tab... why do you care if they can see it? There are other
means to retrieve the permissions from objects if you want to.

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Steven" <Steven@discussions.microsoft.com> wrote in message
news:78227E62-313D-4A6A-8806-85FEEB349AA3@microsoft.com...
> The "Object" tab on the DSA.MSC when Advanced Features is viewed. I really
> like the idea of using TaskPad but what would prevent users from using the
> regular DSA.MSC from the adminpak?
>
>
> Steve
>
>
>
> "Jorge de Almeida Pinto [MVP - DS]" wrote:
>
>> what do you mean with "Block Object Views""
>>
>> --
>>
>> Cheers,
>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>>
>> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services #
>>
>> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
>> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
>> ------------------------------------------------------------------------------------------
>> * How to ask a question --> http://support.microsoft.com/?id=555375
>> ------------------------------------------------------------------------------------------
>> * This posting is provided "AS IS" with no warranties and confers no
>> rights!
>> * Always test ANY suggestion in a test environment before implementing!
>> ------------------------------------------------------------------------------------------
>> #################################################
>> #################################################
>> ------------------------------------------------------------------------------------------
>> "Steven" <Steven@discussions.microsoft.com> wrote in message
>> news:2E5BD7BF-56E4-4DDF-9032-AE0CF155E499@microsoft.com...
>> > Nice possibilties but this would block Object views as well. I am open
>> > for
>> > suggestions.
>> > --
>> > Steve
>> >
>> >
>> >
>> > "Jorge de Almeida Pinto [MVP - DS]" wrote:
>> >
>> >> not sure if it will work, but instead of using ADUC, you may to try to
>> >> see
>> >> if creating a custom TASKPAD will help you with that (by disabling
>> >> Advanced
>> >> View features)
>> >> http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx
>> >>
>> >> --
>> >>
>> >> Cheers,
>> >> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>> >>
>> >> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
>> >>
>> >> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
>> >> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
>> >> ------------------------------------------------------------------------------------------
>> >> * How to ask a question --> http://support.microsoft.com/?id=555375
>> >> ------------------------------------------------------------------------------------------
>> >> * This posting is provided "AS IS" with no warranties and confers no
>> >> rights!
>> >> * Always test before implementing!
>> >> ------------------------------------------------------------------------------------------
>> >> #################################################
>> >> #################################################
>> >> ------------------------------------------------------------------------------------------
>> >> "Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote in message
>> >> news:O9Ei6qAkIHA.5080@TK2MSFTNGP02.phx.gbl...
>> >> > Even if you were to hide it, the HD staff could just make changes
>> >> > from
>> >> > the
>> >> > command prompt.
>> >> >
>> >> > --
>> >> > Paul Bergson
>> >> > MVP - Directory Services
>> >> > MCT, MCSE, MCSA, Security+, BS CSci
>> >> > 2008, 2003, 2000 (Early Achiever), NT4
>> >> >
>> >> > http://www.pbbergs.com
>> >> >
>> >> > Please no e-mails, any questions should be posted in the NewsGroup
>> >> > This posting is provided "AS IS" with no warranties, and confers no
>> >> > rights.
>> >> >
>> >> > "Steven" <Steven@discussions.microsoft.com> wrote in message
>> >> > news:0A714CE0-860F-4435-9C6B-16C667516468@microsoft.com...
>> >> >> How can I hide the security tab in AD Users and Computers from my
>> >> >> Help
>> >> >> Desk?
>> >> >> --
>> >> >> Steve
>> >> >>
>> >> >
>> >> >
>> >>
>> >>
>>
>>