Cannot Completely Hide an Object in Active Directory (276679)


The information in this article applies to:

  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
This article was previously published under Q276679

SYMPTOMS

Active Directory in Windows 2000 supports a security model that prevents you from completely hiding an object. When you attempt to hide an object, the hidden object is displayed in the member list, but the client computer cannot retrieve any additional information on this object.

STATUS

This behavior is by design.

MORE INFORMATION

Currently, you can completely hide a mailbox within Microsoft Exchange Server. When you use Exchange Server, the object is hidden, and it is not seen in any groups (distribution lists) it is a member of. In Windows 2000, you can hide an object by placing it in a hidden organizational unit that only administrators have the permissions to view. However, this object can still be viewed in all the groups that the object is a member of.
Modification Type:MinorLast Reviewed:1/26/2006
Keywords:kbenv kbprb KB276679
©2004 Microsoft Corporation. All rights reserved.