[Casper] Active Directory Bind problem
Smith, William
william.smith at merrillcorp.com
Thu May 8 09:07:25 PDT 2008
Hi Shawn!
This is standard behavior for AD connections. The same information you're
seeing is usually used for email and phone number lookups and any LDAP
utility will allow the students to see it regardless of whether you're using
Tiger or Leopard (or Windows or Linux or something else). Disabling this one
feature in Leopard doesn't prevent someone from accessing the data using
other means.
If you're concerned about privacy then I'd suggest modifying your AD
security to not allow read access to all users. Be very careful of this
because you can easily break systems that rely on AD lookups.
--
bill
William M. Smith, Technical Analyst
Digital Information Systems Support
Merrill Communications, LLC
(651) 632-1492
On 5/8/08 9:05 AM, "Shawn Surma" <Shawn_Surma at liverpool.k12.ny.us> wrote:
> We are just starting to use Casper in production and have found that the
> AD Bind adds the domain to the contacts tab and in Leopard allows users to
> see all the directory information of all students and faculty. Does
> anyone know how I can remove the domain from the Contacts tab of Directory
> Utility without having to go in manually?
More information about the Casper
mailing list