i am having win 2003 server , exchange 2003 on the same server which is the DC , I am having a problem that domain users can delete or modify other users AD properties such as email adress, phone, address through AD Search, Please give me solution for this, how can protect this from other users Thanks in advance Shafeek

Windows server 2003 is built to allow all users to do everything, windows 2000 server was locked down and you had to open users up to files/perms If you go into the users properties and look at member of" i bet they are in the admin group or something that gives them access to the active directory. hope this helps. remember windows 2003 server is very loose on security unless you specify otherwise

Hi nudesign, Are you sure that you got your post round the right way? Sure you mean that 2003 is the locked down & 2000 is open.

i think you may be right, bloody microsoft always change it!.still sounds like they are members of some groups that they shouldnt. set up a security group for "users" and make sure they dont have admin rights.

Thanks Guys, the real problem is what you said like domain users was added in the administrators group, now i solved the problem Thank you very much