Active Directory in Windows 2000 supports a security model that prevents you from completely hiding an object. When you attempt to hide an object, the hidden object is displayed in the member list, but the client computer cannot retrieve any additional information on this object.
This behavior is by design.
Currently, you can completely hide a mailbox within Microsoft Exchange Server. When you use Exchange Server, the object is hidden, and it is not seen in any groups (distribution lists) it is a member of. In Windows 2000, you can hide an object by placing it in a hidden organizational unit that only administrators have the permissions to view. However, this object can still be viewed in all the groups that the object is a member of.
Back to the top
