[Samba] How to create an user with isCriticalSystemObject or/and showInAdvancedViewOnly

Rowland Penny rpenny at samba.org
Wed Jul 21 17:43:49 UTC 2021


On Wed, 2021-07-21 at 17:29 +0000, * Neustradamus * wrote:
> I would like to hide an account at creation with
> isCriticalSystemObject or/and showInAdvancedViewOnly.
> 
> If the command does not exist, maybe time to add?
> 
> For security reasons...
> 

I am fairly sure you cannot hide an individual AD object, I believe you
can stop a user from seeing certain AD objects, but you would have to
do this for every user. It also wouldn't stop anyone on a Unix domain
member (at least) from searching for them with ldap tools (ldapsearch
etc)

Rowland





More information about the samba mailing list