Active Directory Bind problem

[#1]

We are just starting to use Casper in production and have found that the
AD Bind adds the domain to the contacts tab and in Leopard allows users to
see all the directory information of all students and faculty. Does
anyone know how I can remove the domain from the Contacts tab of Directory
Utility without having to go in manually?

Thanks, Shawn

Liverpool Central School District
Computer Services
Liverpool, NY 13090
(315) 622-7150

[talkingmoose]

Hi Shawn!

This is standard behavior for AD connections. The same information you're
seeing is usually used for email and phone number lookups and any LDAP
utility will allow the students to see it regardless of whether you're using
Tiger or Leopard (or Windows or Linux or something else). Disabling this one
feature in Leopard doesn't prevent someone from accessing the data using
other means.

If you're concerned about privacy then I'd suggest modifying your AD
security to not allow read access to all users. Be very careful of this
because you can easily break systems that rely on AD lookups.

--

bill

William M. Smith, Technical Analyst
Digital Information Systems Support
Merrill Communications, LLC
(651) 632-1492