Article ID: 943100 - View products that this article applies to.
This article describes how to set restrictions on a site collection on a computer that is running the 2007 Microsoft Office servers Service Pack 1 (SP1). The article discusses how to allow access only for users in a particular organizational unit (OU).
Administrators can use the stsadm.exe command to set restrictions on a site collection to allow access only for users in a particular OU. To do this, follow these steps:
stsadm.exe –o getsiteuseraccountdirectorypath –url site collection urlWhen the administrator uses the Stsadm.exe tool or another management tool to manage the site collection, the administrator will be added as a user to the site collection. The command in step 3 will block the administrator from managing the site collection if the administrator does not belong to the OU.
To enable the administrator to manage the site collection, type the following at the command prompt, and then press ENTER:
stsadm.exe -o setproperty -url webappurl -pn "peoplepicker-serviceaccountdirectorypaths" -pv pathsNote In this command, paths is a placeholder for a semicolon-separated list of distinguished names.
To see the list of allowed administrator directory paths, type the following at the command prompt, and then press ENTER:
stsadm.exe -o getproperty -url webappurl -pn "peoplepicker-serviceaccountdirectorypaths"
Article ID: 943100 - Last Review: November 14, 2007 - Revision: 1.3