Restrict access of listing domain users

[weeb]

Anyone know how to prevent domain users from being able to list users and groups from the domain. My users are not admins, but they can still see the sharing tab and the "share with" button in the folderband, because there is no way to get rid of the folderband. When users go to enable a file share, they cannot complete the share as it says you need admin access. Which is what I want. The problem is that when setting permissions on the share users can list all users and groups from the domain.

 

Does anyone know if there is a way to either A) block users from listing the domain or B) block user access to the "Select users, computers, service accounts, or groups" dialog.

Edited January 19, 2011 by weeb

[chrisbrown]

Hi weeb,

 

There is no (read: not really) any way to do this. You *can* theoretically do it with some pretty intense AD hacks, but it is definitely not encouraged and your network will break in time.

 

Chris