You want to limit
the People
Picker
control
on the
site-collection level to find
users in
a specific organization unit (OU) in a trusted domain. However, you cannot use the stsadm -o setsiteuseraccountdirectorypath command to work with OUs from a trusted domain. You can use the stsadm -o setsiteuseraccountdirectorypath command only when the OU is from the same domain where the
Microsoft Office SharePoint Sever (MOSS) 2007 farm is installed.
To resolve this issue, install the hotfix package that is
described in the following Microsoft Knowledge Base article:
961750
(http://support.microsoft.com/kb/961750/
)
Description of the Windows SharePoint Services 3.0 hotfix package (Sts.msp): February 24, 2009
After you install this hotfix, follow these steps to
enable LDAP referral chasing for trusted domains.
This makes
sure that the
stsadm -o setsiteuseraccountdirectorypath command to work with OUs from a trusted domain:
- Visit the following Microsoft Web site to download Windows
PowerShell:
- Install and then start Windows PowerShell.
- In Windows PowerShell, run
the following command to set the new PeoplePickerSettings.ReferralChasingOption property and to enable the new behavior on a Web application.
[Reflection.Assembly]::Load("Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c")
[Reflection.Assembly]::Load("System.DirectoryServices, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a")
$webapp=[Microsoft.SharePoint.Administration.SPWebApplication]::Lookup("http://webapp")
$webapp.PeoplePickerSettings.ReferralChasingOption = [System.DirectoryServices.ReferralChasingOption]::All;
$webapp.Update();
Back to the top
